Skip to content

Probe request

Definition

An 802.11 management frame broadcast by a client device when actively scanning for Wi-Fi networks. Contains the device MAC address and, in many implementations, the SSIDs of previously joined networks. Captured in plaintext by any monitor-mode receiver in range.

Related terms

BSSID
Basic Service Set Identifier. The MAC address of a specific access point radio. Used in association logs and packet captures to uniquely...
MAC address randomisation
A privacy mechanism in modern operating systems that substitutes a randomly generated MAC address for the device's globally unique burned-in address during...
Monitor mode
An 802.11 radio mode that captures every wireless frame in range, including management and control frames, without associating to an access point....
Preferred Network List (PNL)
The list of previously joined Wi-Fi networks stored on a client device. The device automatically probes for networks on the PNL when...
RSSI
Received Signal Strength Indicator. A value, typically expressed in dBm, recorded in access-point logs and packet captures that indicates how strongly a...

Explained in

  • Wi-Fi ForensicsAn 802.11 management frame broadcast by a client device when actively scanning for Wi-Fi networks. Contains the device MAC address and, in many implementations...

Your journey to becoming a forensic professional starts here.

Practice with mock tests, learn from structured notes, and get your questions answered by a global forensic community, all in one place.