• Wi-Fi
  • Intermediate
  • 5 min
  • Serial CLI

Recipe · Intermediate · Wi-Fi

How to run a passive Wi-Fi sniffer session

Use Wi-Fi sniff mode to cycle channels and display nearby 2.4 GHz packet activity from the serial CLI.

Wi-Fi signal with local network devices.
A practical ESP32 Bit Pirate recipe based on documented firmware commands.
Step 1

Commands

Run this sequence from the CLI. Adjust pins, addresses or filenames to match your own setup.

Result

What it means

The session gives a quick radio activity baseline before using waterfall, scan or network discovery commands.

Troubleshooting

  • Sniffing changes Wi-Fi state, so use USB Serial rather than Web CLI.
  • Only capture traffic in an authorized environment.
  • Use scan or waterfall when you need channel-level context.

Next steps

  • Run scan to list networks with RSSI and channels.
  • Use waterfall on the device screen.
  • Reset Wi-Fi before reconnecting to an AP.

passive Wi-Fi sniffer FAQ

What does passive Wi-Fi sniffing show?

It cycles channels and logs nearby Wi-Fi traffic or metadata without joining a network. It is useful for visibility, channel activity and quick RF environment checks.

What data does passive Wi-Fi sniffing collect?

Passive sniffing observes nearby 802.11 traffic metadata and selected frames without joining the network. It is useful for channel context, device presence and authorized lab analysis.

Can sniffing decrypt Wi-Fi traffic?

No. Passive sniffing from the firmware is for observation and metadata-style debugging, not decrypting protected Wi-Fi sessions.

Go deeper