ssidsniff is a tool to help with reconaissance of wireless access points. It
supports any wireless card that is able to deliver raw 802.11
frames. ssidsniff then uses the 802.11 packet header as well as other packet
contents to display a top(1) like view of available wireless networks.

This tool is currently developed on Linux, and works best on it.

Features:
 - Easy to use top(1) like interface
 - Sort networks by various criteria: packets per second, number of data 
   packets etc.
 - Capture selected sources (or any data sources) to libpcap compatible
   capture files
 - Offer a strings(1) like feature for cursory glance of recent packet 
   contents
 - Audio notifications of wireless activity

Tested hardware:
 Cisco PCM-340, PCM-350
 Intel ipw2100
 Lucent 
 Intersil

Usage:
Unpack and compile the software. You should end up with an executable called
ssidsniff.

Configure your wireless card to receive raw 802.11 frames. This mode is
frequently called "monitor" mode, and documentation on how to achieve that
is here: http://www.bastard.net/~kos/wifi/

Start ssidsniff as root: shell# ./ssidsniff -i <interface_name>

Online help is accessible via the 'h' key. 'q' quits.


Limitations

Signal quality/noise level:
Obtaining link quality is not well supported at the moment. This is due to
several factors: Wireless drivers and firmware often do not return reliable
data, or any data, to applications; With the current API's, it's impossible 
to retrieve per packet quality data; the PCAP link type and hence the data 
format used in this application does not support per packet quality data. 
There are some hacks that can be implemented, however it seems that it's 
much more reliable to use the packets per second figure as a substitute. An
access point usually emits 10 beacon packets per second.

Channel hopping: 
This version of ssidsniff does not use an embedded channel hopper, however a
channel hopping script that works with Linux and Lucent hardware is
included. Channel hopping support may be added in the future. Cisco PCM
cards do not require any channel hopping, rather return packets from the
strongest source.
