How Your Device Finds WiFi?

:satellite: Ever Wondered How Your Device Finds WiFi? The Answer Lies in Beacon Frames!

Ever wondered how your phone instantly finds WiFi networks? It’s all thanks to Beacon Frames—the heartbeat of every WiFi network! :signal_strength:

APs send beacons every 100ms (by default) to announce their presence, helping devices discover and connect efficiently.

:mag: What’s Inside a Beacon Frame?
A beacon frame isn’t just about the WiFi name (SSID)—it carries essential network details:

:satellite: Basic Info:
:heavy_check_mark: SSID & BSSID – Network name & AP’s unique identifier.
:heavy_check_mark: Timestamp & Beacon Interval – Synchronization & transmission timing.

:signal_strength: Channel & Frequency:
:heavy_check_mark: Country Code – Regulatory domain & allowed frequencies.
:heavy_check_mark: Channel & Bandwidth – Whether the AP operates on 20, 40, 80, or 160 MHz.

:lock: Security & Authentication:
:heavy_check_mark: RSN (WPA3, WPA2, Open WiFi) – Defines encryption & security policies.
:heavy_check_mark: Authentication Type – Pre-shared key (PSK) or enterprise security.

:rocket: WiFi Capabilities:
:heavy_check_mark: HT (WiFi 4), VHT (WiFi 5), HE (WiFi 6), EHT (WiFi 7) – Determines supported
features.
:heavy_check_mark: OFDMA, MU-MIMO, TWT, BSS Coloring – Enhances efficiency & performance.

:hammer_and_wrench: Traffic Management:
:heavy_check_mark: Traffic Indication Map (TIM) & DTIM – Helps devices wake up for buffered data.
:heavy_check_mark: Vendor-Specific IEs – AP custom features like AP Name broadcasting.

:chart_with_downwards_trend: How Beacons Affect WiFi Performance?

:white_check_mark: Essential for network discovery & fast roaming.
:white_check_mark: Helps clients select the best AP.
:x: Can cause high overhead in congested networks.
:x: Impacts battery life of mobile & IoT devices.

:bulb: Optimizations:
:pushpin: Adjust beacon interval to reduce airtime usage.
:pushpin: Limit excessive SSIDs to prevent beacon floods.
:pushpin: Optimize DTIM settings for better power efficiency.

:microscope: Real-World Beacon Frame Analysis
I’ve attached a wireless sniffer log :page_facing_up: that captures actual beacon frames in action. Open it
with Wireshark and use this filter to analyze them:
Filter: wlan.fc.type_subtype == 0x08

What interesting insights have you discovered from beacon frames?

LinkedIn: :point_down:

1 Like