Note: currently only works with a tracefile, live capture will be implemented soon™.
You need to have tshark
installed. It generally comes with Wireshark.
If you want to use the Fingerbank SQLite database, you will need to download it
and set the $FINGERBANK_SQLITE_PATH
env variable accordingly.
e.g: export FINGERBANK_SQLITE_PATH="packaged.sqlite3"
If you want to use the Fingerbank API, you will need to register for an API key
and set the $FINGERBANK_API_KEY
env variable accordingly.
e.g: export FINGERBANK_API_KEY="ABCDEF123456789"
You need a wireshark OUI database file for OUI lookups. The last version is available at https://code.wireshark.org/review/gitweb?p=wireshark.git;a=blob_plain;f=manuf;hb=HEAD
Save it as manuf
.
pip install -r requirements.txt
A Pipfile
is included if you are familiar with pipenv
.
usage: collector.py [-h] [-f FILE | -i INTERFACE] [--api | --db] ssid
positional arguments:
ssid the SSID of the network to monitor
optional arguments:
-h, --help show this help message and exit
-f FILE, --file FILE the pcap file to analyze
-i INTERFACE, --interface INTERFACE
the wifi interface to capture from
querying method:
--api query the Fingerbank API
--db query the Fingerbank SQLite db
Found devices information will be stored in the OUTPUT_PATH
(see collector.py
) folder.