Type Variable in WiGLE Data

[izzy4505]

I've been studying data outputted by WiGLE, and I'm quite curiousity about the 'type' field. So far, I've found these for the possible values: infra, infrastruc, ad-hoc, BBS, turbocell, data, and probe. Would it be correct to assume that:

infra=802.11 infrared access point
infrastruc=Regular AP
ad-hoc=Peer to Peer 802.11 Network
BBS=Same as infrastruc
turbocell=KarlNet's proprietary 802.11-like wireless protocol

I have no guess as to what data and probe are. Are these assumptions correct? Are there more possible types? Thanks in advance.

[bobzilla]

That's correct, except that infra = infrastruc = BBS = regular AP. Probe probably means the package got it's info by probing for the net and didn't get info about what it was. Data is pry bad data (I really need to write a scrubbing script to clean bad/currupted data from the db).

[izzy4505]

Another question. . . is there a difference between ???? and when the field is null?

[bobzilla]

Many fields I default to question marks, if it's blank it just means the parser got a zero-length string for the field (usually).

[mentat]

That's correct, except that infra = infrastruc = BBS = regular AP. Probe probably means the package got it's info by probing for the net and didn't get info about what it was. Data is pry bad data (I really need to write a scrubbing script to clean bad/currupted data from the db).

Actually probe probably means that kismet saw a client probing for that network at that location. It isn't actually an AP of any sort.

[izzy4505]

So probe means that somebody was using that ap?

[mentat]

So probe means that somebody was using that ap?

Probe means that kismet saw a client probe for an SSID, but never saw an AP answer the probe. NetStumbler is a moving <no ssid> "probe network." If kismet does see an association take place then, in the kismet client, it files the "probe network" as a client to the AP. I think at that point the client is no longer recorded in at least some of the output file formats. It might still be in XML, but I'm not sure.