WiFi Explorer / WiFi Explorer Pro 3 Filters Cheat Sheet

Filter by Keyword Filter by Network Attribute Filter by Network Attribute (cont.)

Filter by network name (SSID), Type any text. Use quotation marks for exact You can lter networks by speci c attributes. These attributes map to the Networks Table dot11.net.max_basic_rate* Maximum supported basic rate (Mbps)
annotations, vendor, or device name matching or names with spaces. columns and are identi ed with the pre x dot11.net. Use the auto-complete function in the
dot11.net.max_basic_rate == 54, dot11.net.max_basic_rate >=
Filter eld, or select a network, then:
o ce, “ABC School”, AP123, guest, etc. 24
dot11.net.max_rate Maximum supported rate (Mbps)
Filter by BSSID Type one or more octets in the form :XX or XX:. Right-click over a eld in the Networks Table > Choose Apply as Filter
dot11.net.max_rate == 300, dot11.net.max_rate >= 600
00:, 00:11:, :55, :44:55, etc. dot11.net.amendments* Supported network amendments (d/e/h/i/j/k/p/r/s/u/v/ dot11.net.min_basic_rate* Minimum supported basic rate (Mbps)
Filter by band Type the band frequency in GHz. w)
dot11.net.amendments ~~ d, dot11.net.amendments ~~ v dot11.net.min_basic_rate == 1, dot11.net.min_basic_rate >= 24
2.4ghz, 2ghz, 5ghz, etc. dot11.net.annotations Annotations dot11.net.min_rate Minimum supported rate (Mbps)
Filter by generation Type wi 4, wi 5, or wi 6. dot11.net.annotations == “3rd Floor”, dot11.net.min_rate == 1, dot11.net.min_rate <= 5.5
dot11.net.annotations ~~ oor
Filter by channel Type a channel number or range. dot11.net.mode Network mode (a/b/g/n/ac/ax)
dot11.net.band Frequency band (2.4, 5 or 6* GHz)
1, 36, 7-10, etc. dot11.net.mode == a/g/n, dot11.net.mode == ax
dot11.net.band == 2.4, dot11.net.band == 5ghz
Type the channel width in MHz. Units may be dot11.net.noise Noise (dBm)
Filter by channel width dot11.net.basic_rates Supported basic rates (Mbps)
omitted.
dot11.net.basic_rates == “1, 2, 5.5, 11”, dot11.net.noise >= -90
20, 20mhz, 40mhz, etc.
dot11.net.basic_rates ~~ 12 dot11.net.protection_mode HT protection mode
Filter by signal strength (RSSI) Type <, >, <= or >= and the signal strength in dBm.
dot11.net.beacon_airtime* Beacon airtime (ms) dot11.net.protection_mode == “Non-HT Mixed”,
>-65, <=-70, etc.
dot11.net.beacon_airtime > 0.5 dot11.net.protection_mode != “None”
Type the letter(s) that identify the mode: a, b, g, n,
Filter by network mode dot11.net.beacon_interval Beacon interval (ms) dot11.net.security Security mode
ac, or ax. You may pre x it with 802.11, 80211 or 11.
dot11.net.beacon_interval == 102.4, dot11.net.security == "WPA2 (PSK)”, dot11.net.security == OWE
ac, 802.11b, 80211g, 11n, etc. dot11.net.beacon_interval < 100
dot11.net.signal Signal strength (dBm)
Type the acronym for the security or encryption dot11.net.beacon_mode* Mode used to advertise BSSID (transmitted, nontransmitted)
Filter by security or encryption type type: open, secure, wep, wpa, wpa2, wpa3, sae, dot11.net.signal >= -72
dot11.net.advertisement_mode == nontransmitted
psk, owe, 802.1X. dot11.net.snr Signal-to-noise ratio (dB)
dot11.net.beacon_rate* Rate at which beacon frames are transmitted (Mbps)
The identi er of the feature: wps (WPS), ft (BSS dot11.net.snr >= 25
Filter by feature dot11.net.beacon_rate == 1, dot11.net.beacon_rate >= 11
Fast Transition), dtpc* (DTPC), hs* (Hotspot 2.0).
dot11.net.ssid Network name (SSID)
dot11.net.bssid BSSID
Filter by SSID visibility Type hidden to show hidden networks only.
dot11.net.bssid == B4:B6:86:AE:21:16, dot11.net.bssid ~~ dot11.net.ssid == intuitibits, dot11.net.ssid ~~ guest

Combine or Negate Filters dot11.net.center_freq

21:16
Center frequency (MHz) dot11.net.stations BSS Load station count
dot11.net.center_freq == 5805, dot11.net.center_freq < 5000 dot11.net.stations == 0, dot11.net.stations > 10
Combine lters using the OR operator 20mhz OR 40mhz
dot11.net.channel Channel dot11.net.streams Number of spatial streams
Combine lters using the AND operator 5ghz AND dot11.net.signal >= -72 dot11.net.channel == 1, dot11.net.channel >= 36 dot11.net.streams == 1, dot11.net.streams >= 3
Negate a lter using the NOT operator NOT 20mhz dot11.net.channel_util BSS Load channel utilization (%) dot11.net.type Network type (ad-hoc, mesh, or infrastructure)
dot11.net.channel_util >= 10, dot11.net.channel_util < 50% dot11.net.type == ad-hoc, dot11.net.type == mesh,
Group lter expressions using parenthesis (2.4ghz AND 40mhz) OR (5ghz AND 160mhz)
dot11.net.channel_width Channel width (MHz) dot11.net.type == infrastructure
Note: Logical operators are CASE SENSITIVE.
dot11.net.channel_width == 40, dot11.net.channel_width > dot11.net.vendor Vendor
20
Compare Values dot11.net.clients* Number of associated clients detected dot11.net.vendor == “Ruckus Wireless”, dot11.net.vendor ~~
Aruba
dot11.net.clients > 3 dot11.net.wide_channel* Wide channel
Use the following operators to compare values when ltering using network attributes or
dot11.net.country_code Country code
information element elds: dot11.net.wide_channel == 42, dot11.net.wide_channel == 155
dot11.net.country_code == US
== Equal Numerical and text values dot11.net.wps Wi-Fi Protected Setup
dot11.net.device_name Device name
!= Not equal Numerical and text values dot11.net.wps == Con gured, dot11.net.wps == Locked
dot11.net.device_name == AP123, dot11.net.device_name ~~ AP
~~ Contains Text values Note: If you lter by the network attribute name only, for example,
dot11.net.fast_transition Fast BSS transition dot11.net.country_code, only the networks with this attribute are displayed.
!~ Does not contain Text values
dot11.net.fast_transition == OTA, dot11.net.fast_transition ==
> Greater than Numerical values dot11.net.generation
OTD
Generation (4, 5, or 6) Filter by Information Element Field
>= Greater or equal than Numerical values dot11.net.generation == 4, dot11.net.generation >= 5
You can lter networks by speci c information element elds*. The pre x dot11. identi es
< Less than Numerical values Number of information elements in beacon or probe more than 680 elds (except for the pre x dot11.net, which identi es network attributes).
dot11.net.ie_count*
response frames Use the auto-complete function in the Filter eld, or select a network, then:
<= Less or equal than Numerical values
dot11.net.ie_count == 10, dot11.net.ie_count >= 15
Note: If the value you’re using for ltering contains spaces, use quotation marks. E.g., for Go to Advanced Details > Right-click over a eld or sub eld > Choose Apply as Filter
showing networks named “Guest Network” only, use dot11.net.ssid == “Guest Network” dot11.net.ie_total_length* Total length of information elements (bytes)
* This lter or feature is only available in WiFi Explorer Pro 3. dot11.net.ie_length > 300 © 2023. Intuitibits LLC. All rights reserved. Revision 2.3 (10/17/2023).
ffi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fl
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi
fi