Removing Wireless Headers
Wireless capture files contain a lot of frames that we are not interested in.
For example this capture file here is from an unencrypted network,
and indicates that network traffic is mixed with other wireless frames.
One use of Airdecap-ng is to remove the wireless headers
from unencrypted capture files.
We’ll use the -b option and set the access point MAC address to keep.
This will filter out all additional APs from our capture file.
The output indicates that of the 307 packets that were in a capture file,
only 95 were actually data packets linked to that BSSID.
Airdecap-ng saved the data packets
linked to our target BSSID into a new capture file,
with dec, for decrypted, appended to the original filename.
Our cleaned-up capture file is displayed in Wireshark
with only the data transferred across the desired network.