使用MLME帧内容的Wifi客户端的被动分类
Passive Taxonomy of Wifi Clients using MLME Frame Contents
摘要：
在支持Wifi网络时，识别连接到AP的客户端设备的类型很有用。了解客户端的类型可以指导故障排除步骤，允许搜索已知问题，或允许在AP中实施特定的解决方法。出于支持目的，分析正常流量的被动方法优于主动方法，后者通常发送可能触发客户端错误的数据包选项的模糊组合。我们开发了一种被动客户端识别的方法，它观察Wifi管理帧的内容，包括探测和关联请求。我们表明，现代Wifi芯片组和设备驱动程序填充的管理帧是相当可区分的，使得在许多情况下可以识别设备的型号。用来自DHCP的附加信息补充来自Wifi管理帧的信息进一步扩展了可以区分的客户端的集合。
英文摘要：
In supporting Wifi networks it is useful to identify the type of client device connecting to an AP. Knowing the type of client can guide troubleshooting steps, allow searches for known issues, or allow specific workarounds to be implemented in the AP. For support purposes a passive method which analyzes normal traffic is preferable to active methods, which often send obscure combinations of packet options which might trigger client bugs. We have developed a method of passive client identification which observes the contents of Wifi management frames including Probes and Association requests. We show that the management frames populated by modern Wifi chipsets and device drivers are quite distinguishable, making it possible in many cases to identify the model of the device. Supplementing information from the Wifi management frames with additional information from DHCP further extends the set of clients which can be distinguished.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
