That’s how I used Airtool, Wireshark, and WiFi Explorer to find the source of containment. If that same BSSID is broadcasting beacons for its own WLAN you will see it. Copy the BSSID and paste it into WiFi Explorer.

You may get lucky and find out who is containing your WLAN. Use this filter to show all deauthentication frames: wlan.fc.type_subtype = 0x000c After 5 minutes of capturing, open up the pcap in Wireshark. How do you know if containment is happening? Using Airtool, capture frames on your operating channels.

You can troubleshoot this issue using the following tools: This happens by sending deauthentication frames to devices connected to your WLAN or by sending broadcasted deauthetication frames. What is happening? Another network is containing your WLAN. Sometimes those devices won’t be able to connect at all to your WLAN. When they are disconnected, they often stay disconnected. The symptom you’ll see are devices dropping from your WLAN. WLAN containment is not a situation you want to deal with. Containment of a WLAN is the act of shutting it down! We discuss how you can find out if you’re being contained.

Pcap wireshark filter ssid