analyze_wifi_pcap_using_scapy.ipynb

{
  "nbformat": 4,
  "nbformat_minor": 0,
  "metadata": {
    "colab": {
      "provenance": [],
      "authorship_tag": "ABX9TyPLh1+2vT2pPPNLh6mnkP6j",
      "include_colab_link": true
    },
    "kernelspec": {
      "name": "python3",
      "display_name": "Python 3"
    },
    "language_info": {
      "name": "python"
    }
  },
  "cells": [
    {
      "cell_type": "markdown",
      "metadata": {
        "id": "view-in-github",
        "colab_type": "text"
      },
      "source": [
        "<a href=\"https://colab.research.google.com/github/ericyoc/analyze-wifi-pcap-using-scapy/blob/main/analyze_wifi_pcap_using_scapy.ipynb\" target=\"_parent\"><img src=\"https://colab.research.google.com/assets/colab-badge.svg\" alt=\"Open In Colab\"/></a>"
      ]
    },
    {
      "cell_type": "code",
      "execution_count": 1,
      "metadata": {
        "id": "u8L53GOU7j-i"
      },
      "outputs": [],
      "source": [
        "#!pip install scapy\n",
        "from scapy.all import *\n",
        "#!pip install prettytable\n",
        "from prettytable import PrettyTable"
      ]
    },
    {
      "cell_type": "code",
      "source": [
        "def filter_packets(packets):\n",
        "    tcp_packets = packets.filter(lambda p: TCP in p)\n",
        "    udp_packets = packets.filter(lambda p: UDP in p)\n",
        "    icmp_packets = packets.filter(lambda p: ICMP in p)\n",
        "    other_packets = packets.filter(lambda p: not (TCP in p or UDP in p or ICMP in p))\n",
        "    return tcp_packets, udp_packets, icmp_packets, other_packets\n",
        "\n",
        "def filter_packets_by_source_ip(packets, source_ip):\n",
        "    filtered_packets = packets.filter(lambda p: IP in p and p[IP].src == source_ip)\n",
        "    return filtered_packets\n",
        "\n",
        "def filter_packets_by_destination_port(packets, dest_port):\n",
        "    filtered_packets = packets.filter(lambda p: TCP in p and p[TCP].dport == dest_port)\n",
        "    return filtered_packets\n",
        "\n",
        "def filter_packets_by_mac_address(packets, mac_address):\n",
        "    filtered_packets = packets.filter(lambda p: Ether in p and (p.src == mac_address or p.dst == mac_address))\n",
        "    return filtered_packets\n",
        "\n",
        "def filter_packets_by_ip_range(packets, start_ip, end_ip):\n",
        "    filtered_packets = packets.filter(lambda p: IP in p and start_ip <= p[IP].src <= end_ip)\n",
        "    return filtered_packets\n",
        "\n",
        "def filter_packets_by_protocol(packets, protocol):\n",
        "    filtered_packets = packets.filter(lambda p: p.haslayer(protocol))\n",
        "    return filtered_packets\n",
        "\n",
        "def parse_dns_packets(packets):\n",
        "    dns_packets = packets.filter(lambda p: DNS in p)\n",
        "    domain_info = []\n",
        "    for packet in dns_packets:\n",
        "        domain_name = packet[DNS].qd.qname.decode('utf-8')\n",
        "        domain_info.append(domain_name)\n",
        "    return domain_info\n",
        "\n",
        "def filter_suspicious_packets(packets, max_payload_size):\n",
        "    suspicious_packets = packets.filter(lambda p: TCP in p and len(p[TCP].payload) > max_payload_size)\n",
        "    return suspicious_packets\n",
        "\n",
        "def filter_packets_by_tcp_flags(packets, flags):\n",
        "    filtered_packets = packets.filter(lambda p: TCP in p and p[TCP].flags & flags)\n",
        "    return filtered_packets\n",
        "\n",
        "def parse_beacon_frames(packets):\n",
        "    beacon_frames = packets.filter(lambda p: p.haslayer(Dot11Beacon))\n",
        "    channel_info = {}\n",
        "    for beacon in beacon_frames:\n",
        "        ssid = beacon.info.decode('utf-8', 'ignore')\n",
        "        bssid = beacon.addr3\n",
        "        channel = ord(beacon[Dot11Elt:3].info)\n",
        "        power_constraint = get_power_constraint(beacon)\n",
        "        if channel not in channel_info:\n",
        "            channel_info[channel] = []\n",
        "        channel_info[channel].append((ssid, bssid, power_constraint))\n",
        "    return channel_info\n",
        "\n",
        "def get_power_constraint(beacon):\n",
        "    power_constraint_elem = beacon.getlayer(Dot11Elt, ID=32)\n",
        "    if power_constraint_elem:\n",
        "        power_constraint = ord(power_constraint_elem.info)\n",
        "        return power_constraint\n",
        "    return None\n",
        "\n",
        "def parse_management_frames(packets):\n",
        "    management_frames = packets.filter(lambda p: p.haslayer(Dot11) and p.type == 0)\n",
        "    frame_info = []\n",
        "    for frame in management_frames:\n",
        "        frame_type = frame.subtype\n",
        "        source_mac = frame.addr2\n",
        "        destination_mac = frame.addr1\n",
        "        frame_info.append((frame_type, source_mac, destination_mac))\n",
        "    return frame_info\n",
        "\n",
        "def get_frame_type_explanation(frame_type):\n",
        "    frame_types = {\n",
        "        0: \"Association Request\",\n",
        "        1: \"Association Response\",\n",
        "        2: \"Reassociation Request\",\n",
        "        3: \"Reassociation Response\",\n",
        "        4: \"Probe Request\",\n",
        "        5: \"Probe Response\",\n",
        "        8: \"Beacon\",\n",
        "        9: \"ATIM\",\n",
        "        10: \"Disassociation\",\n",
        "        11: \"Authentication\",\n",
        "        12: \"Deauthentication\",\n",
        "        13: \"Action\"\n",
        "    }\n",
        "    return frame_types.get(frame_type, \"Unknown\")\n",
        "\n",
        "def summarize_findings(tcp_packets, udp_packets, icmp_packets, other_packets, source_ip_packets, dest_port_packets,\n",
        "                       mac_address_packets, ip_range_packets, http_packets, suspicious_packets, syn_packets,\n",
        "                       channel_info, management_frame_info, domain_info):\n",
        "\n",
        "    table = PrettyTable()\n",
        "    table.field_names = [\"Finding\", \"Count/Value\"]\n",
        "    table.align[\"Finding\"] = \"l\"\n",
        "    table.align[\"Count/Value\"] = \"c\"\n",
        "\n",
        "    table.add_row([\"TCP Packets\", len(tcp_packets)])\n",
        "    table.add_row([\"UDP Packets\", len(udp_packets)])\n",
        "    table.add_row([\"ICMP Packets\", len(icmp_packets)])\n",
        "    table.add_row([\"Other Packets\", len(other_packets)])\n",
        "    table.add_row([\"Packets from Source IP 192.168.0.1\", len(source_ip_packets)])\n",
        "    table.add_row([\"Packets to Destination Port 80\", len(dest_port_packets)])\n",
        "    table.add_row([\"Packets from/to MAC 00:11:22:33:44:55\", len(mac_address_packets)])\n",
        "    table.add_row([\"Packets in IP Range 192.168.0.1 - 192.168.0.100\", len(ip_range_packets)])\n",
        "    table.add_row([\"HTTP Packets\", len(http_packets)])\n",
        "    table.add_row([\"Suspicious Packets (Payload > 1024)\", len(suspicious_packets)])\n",
        "    table.add_row([\"SYN Packets\", len(syn_packets)])\n",
        "\n",
        "    beacon_channels = \", \".join(str(channel) for channel in channel_info.keys())\n",
        "    table.add_row([\"Beacon Frame Channels\", beacon_channels])\n",
        "\n",
        "    for frame_type, source_mac, destination_mac in management_frame_info:\n",
        "        frame_type_explanation = get_frame_type_explanation(frame_type)\n",
        "        table.add_row([f\"Management Frame: {frame_type_explanation}\", \"\"])\n",
        "\n",
        "    dns_domains = \"\\n\".join(domain_info)\n",
        "    table.add_row([\"DNS Domains\", dns_domains])\n",
        "\n",
        "    return table\n",
        "\n",
        "def analyze_pcap(pcap_file):\n",
        "    \"\"\"\n",
        "    Analyzes a pcap file and performs various packet filtering and parsing operations.\n",
        "\n",
        "    Args:\n",
        "        pcap_file: The path to the pcap file to analyze.\n",
        "    \"\"\"\n",
        "    packets = rdpcap(pcap_file)\n",
        "    tcp_packets, udp_packets, icmp_packets, other_packets = filter_packets(packets)\n",
        "    source_ip_packets = filter_packets_by_source_ip(packets, \"192.168.0.1\")\n",
        "    dest_port_packets = filter_packets_by_destination_port(packets, 80)\n",
        "    mac_address_packets = filter_packets_by_mac_address(packets, \"00:11:22:33:44:55\")\n",
        "    ip_range_packets = filter_packets_by_ip_range(packets, \"192.168.0.1\", \"192.168.0.100\")\n",
        "    http_packets = filter_packets_by_protocol(packets, TCP)\n",
        "    domain_info = parse_dns_packets(packets)\n",
        "    suspicious_packets = filter_suspicious_packets(packets, 1024)\n",
        "    syn_packets = filter_packets_by_tcp_flags(packets, 0x02)  # SYN flag\n",
        "    channel_info = parse_beacon_frames(packets)\n",
        "    management_frame_info = parse_management_frames(packets)\n",
        "\n",
        "    print(\"Detailed Output:\")\n",
        "    print(f\"Number of TCP packets: {len(tcp_packets)}\")\n",
        "    print(f\"Number of UDP packets: {len(udp_packets)}\")\n",
        "    print(f\"Number of ICMP packets: {len(icmp_packets)}\")\n",
        "    print(f\"Number of other packets: {len(other_packets)}\")\n",
        "    print(f\"Packets from source IP 192.168.0.1: {len(source_ip_packets)}\")\n",
        "    print(f\"Packets to destination port 80: {len(dest_port_packets)}\")\n",
        "    print(f\"Packets from/to MAC address 00:11:22:33:44:55: {len(mac_address_packets)}\")\n",
        "    print(f\"Packets in IP range 192.168.0.1 - 192.168.0.100: {len(ip_range_packets)}\")\n",
        "    print(f\"HTTP packets: {len(http_packets)}\")\n",
        "    print(f\"Suspicious packets (payload size > 1024): {len(suspicious_packets)}\")\n",
        "    print(f\"SYN packets: {len(syn_packets)}\")\n",
        "\n",
        "    print(\"\\nBeacon frame information by channel:\")\n",
        "    for channel, beacons in channel_info.items():\n",
        "        print(f\"Channel {channel}:\")\n",
        "        for ssid, bssid, power_constraint in beacons:\n",
        "            print(f\"  SSID: {ssid}, BSSID: {bssid}, Power Constraint: {power_constraint} dBm\")\n",
        "\n",
        "    print(\"\\nManagement frame information:\")\n",
        "    for frame_type, source_mac, destination_mac in management_frame_info:\n",
        "        frame_type_explanation = get_frame_type_explanation(frame_type)\n",
        "        print(f\"  Frame Type: {frame_type} ({frame_type_explanation}), Source MAC: {source_mac}, Destination MAC: {destination_mac}\")\n",
        "\n",
        "    print(\"\\nDomain information from DNS packets:\")\n",
        "    for domain_name in domain_info:\n",
        "        print(f\"  {domain_name}\")\n",
        "\n",
        "    summary_table = summarize_findings(\n",
        "        tcp_packets, udp_packets, icmp_packets, other_packets,\n",
        "        source_ip_packets, dest_port_packets, mac_address_packets,\n",
        "        ip_range_packets, http_packets, suspicious_packets, syn_packets,\n",
        "        channel_info, management_frame_info, domain_info\n",
        "    )\n",
        "\n",
        "    print(\"\\nSummary of Findings:\")\n",
        "    print(summary_table)\n",
        "\n",
        "def main():\n",
        "    pcap_file = \"capture.pcap\"\n",
        "    analyze_pcap(pcap_file)"
      ],
      "metadata": {
        "id": "yn18mRER8OEc"
      },
      "execution_count": 2,
      "outputs": []
    },
    {
      "cell_type": "code",
      "source": [
        "if __name__ == \"__main__\":\n",
        "    main()"
      ],
      "metadata": {
        "colab": {
          "base_uri": "https://localhost:8080/"
        },
        "id": "4sAgdI9N8PRx",
        "outputId": "bcfffc57-0b45-491c-9dfd-8c4312cba735"
      },
      "execution_count": 3,
      "outputs": [
        {
          "output_type": "stream",
          "name": "stdout",
          "text": [
            "Detailed Output:\n",
            "Number of TCP packets: 0\n",
            "Number of UDP packets: 0\n",
            "Number of ICMP packets: 0\n",
            "Number of other packets: 111\n",
            "Packets from source IP 192.168.0.1: 0\n",
            "Packets to destination port 80: 0\n",
            "Packets from/to MAC address 00:11:22:33:44:55: 0\n",
            "Packets in IP range 192.168.0.1 - 192.168.0.100: 0\n",
            "HTTP packets: 0\n",
            "Suspicious packets (payload size > 1024): 0\n",
            "SYN packets: 0\n",
            "\n",
            "Beacon frame information by channel:\n",
            "Channel 2:\n",
            "  SSID: Vlads_Place, BSSID: e4:95:6e:4a:87:d6, Power Constraint: None dBm\n",
            "  SSID: CHP, BSSID: e6:95:6e:4a:87:d6, Power Constraint: None dBm\n",
            "  SSID: Free Candy, BSSID: a4:2b:b0:a2:73:62, Power Constraint: None dBm\n",
            "Channel 1:\n",
            "  SSID: GoTrojans, BSSID: 18:64:72:e8:e0:60, Power Constraint: None dBm\n",
            "  SSID: Guest, BSSID: 18:64:72:e8:e0:61, Power Constraint: None dBm\n",
            "  SSID: DSUGaming, BSSID: 18:64:72:e8:e0:62, Power Constraint: None dBm\n",
            "  SSID: eduroam, BSSID: 18:64:72:e8:e0:63, Power Constraint: None dBm\n",
            "  SSID: DSUGaming, BSSID: 18:64:72:e8:cd:82, Power Constraint: None dBm\n",
            "  SSID: eduroam, BSSID: 18:64:72:e8:cd:83, Power Constraint: None dBm\n",
            "Channel 6:\n",
            "  SSID: Guest, BSSID: 18:64:72:e8:ed:a1, Power Constraint: None dBm\n",
            "  SSID: CubeFarm, BSSID: 78:8a:20:08:cc:df, Power Constraint: None dBm\n",
            "  SSID: GoTrojans, BSSID: 18:64:72:e8:ed:a0, Power Constraint: None dBm\n",
            "  SSID: DSUGaming, BSSID: 18:64:72:e8:ed:a2, Power Constraint: None dBm\n",
            "  SSID: eduroam, BSSID: 18:64:72:e8:ed:a3, Power Constraint: None dBm\n",
            "Channel 11:\n",
            "  SSID: Guest, BSSID: 18:64:72:e8:de:61, Power Constraint: None dBm\n",
            "  SSID: DSUGaming, BSSID: 18:64:72:e8:de:62, Power Constraint: None dBm\n",
            "  SSID: eduroam, BSSID: 18:64:72:e8:de:63, Power Constraint: None dBm\n",
            "  SSID: \u0000\u0000\u0000\u0000, BSSID: 02:18:4a:14:ab:ff, Power Constraint: 0 dBm\n",
            "  SSID: \u0000\u0000\u0000\u0000\u0000\u0000\u0000, BSSID: 02:18:4a:14:ab:f0, Power Constraint: 0 dBm\n",
            "  SSID: \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000, BSSID: 02:18:4a:14:ab:f1, Power Constraint: 0 dBm\n",
            "  SSID: GoTrojans, BSSID: 18:64:72:e8:de:60, Power Constraint: None dBm\n",
            "  SSID: \u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000\u0000, BSSID: 02:18:4a:14:ab:f2, Power Constraint: 0 dBm\n",
            "\n",
            "Management frame information:\n",
            "  Frame Type: 8 (Beacon), Source MAC: e4:95:6e:4a:87:d6, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: e6:95:6e:4a:87:d6, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:e0:60, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:e0:61, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:e0:62, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:e0:63, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:cd:82, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:cd:83, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:ed:a1, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: a4:2b:b0:a2:73:62, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:de:61, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:de:62, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:de:63, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 02:18:4a:14:ab:ff, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 02:18:4a:14:ab:f0, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 02:18:4a:14:ab:f1, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:de:60, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 02:18:4a:14:ab:f2, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 78:8a:20:08:cc:df, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:ed:a0, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:ed:a2, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 8 (Beacon), Source MAC: 18:64:72:e8:ed:a3, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 5 (Probe Response), Source MAC: a4:2b:b0:a2:73:62, Destination MAC: 86:7d:6b:6f:0e:c8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: a4:2b:b0:a2:73:62, Destination MAC: 86:7d:6b:6f:0e:c8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: a4:2b:b0:a2:73:62, Destination MAC: 86:7d:6b:6f:0e:c8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: a4:2b:b0:a2:73:62, Destination MAC: 86:7d:6b:6f:0e:c8\n",
            "  Frame Type: 4 (Probe Request), Source MAC: 46:4d:cc:c5:3e:39, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 4 (Probe Request), Source MAC: 46:4d:cc:c5:3e:39, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:de:61, Destination MAC: 3a:18:ee:e6:dd:bd\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:de:62, Destination MAC: 3a:18:ee:e6:dd:bd\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:de:63, Destination MAC: 3a:18:ee:e6:dd:bd\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:de:60, Destination MAC: 3a:18:ee:e6:dd:bd\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:de:61, Destination MAC: 3a:18:ee:e6:dd:bd\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:de:62, Destination MAC: 3a:18:ee:e6:dd:bd\n",
            "  Frame Type: 4 (Probe Request), Source MAC: 86:64:7e:19:a2:b8, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:e0:61, Destination MAC: 86:64:7e:19:a2:b8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:e0:62, Destination MAC: 86:64:7e:19:a2:b8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:e0:63, Destination MAC: 86:64:7e:19:a2:b8\n",
            "  Frame Type: 4 (Probe Request), Source MAC: 86:64:7e:19:a2:b8, Destination MAC: ff:ff:ff:ff:ff:ff\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:e0:60, Destination MAC: 86:64:7e:19:a2:b8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:e0:61, Destination MAC: 86:64:7e:19:a2:b8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:e0:62, Destination MAC: 86:64:7e:19:a2:b8\n",
            "  Frame Type: 5 (Probe Response), Source MAC: 18:64:72:e8:e0:63, Destination MAC: 86:64:7e:19:a2:b8\n",
            "\n",
            "Domain information from DNS packets:\n",
            "\n",
            "Summary of Findings:\n",
            "+-------------------------------------------------+-------------+\n",
            "| Finding                                         | Count/Value |\n",
            "+-------------------------------------------------+-------------+\n",
            "| TCP Packets                                     |      0      |\n",
            "| UDP Packets                                     |      0      |\n",
            "| ICMP Packets                                    |      0      |\n",
            "| Other Packets                                   |     111     |\n",
            "| Packets from Source IP 192.168.0.1              |      0      |\n",
            "| Packets to Destination Port 80                  |      0      |\n",
            "| Packets from/to MAC 00:11:22:33:44:55           |      0      |\n",
            "| Packets in IP Range 192.168.0.1 - 192.168.0.100 |      0      |\n",
            "| HTTP Packets                                    |      0      |\n",
            "| Suspicious Packets (Payload > 1024)             |      0      |\n",
            "| SYN Packets                                     |      0      |\n",
            "| Beacon Frame Channels                           | 2, 1, 6, 11 |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Beacon                        |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Request                 |             |\n",
            "| Management Frame: Probe Request                 |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Request                 |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Request                 |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| Management Frame: Probe Response                |             |\n",
            "| DNS Domains                                     |             |\n",
            "+-------------------------------------------------+-------------+\n"
          ]
        }
      ]
    }
  ]
}