// frame lab

Free PCAP downloads

Real captures from real hardware. Download any file and open it directly in WiFi Analyser — no setup, no account. These are the same PCAPs referenced in the blog posts.

// note PCAPs will be added as the home lab (WLAN Pi R4 + NetGear A9000) comes online. Subscribe to get notified when new captures drop.
roaming · 802.11r
802.11r FT failure — PMK-R1 mismatch
Client attempts fast transition, AP rejects with status 53. Full FT exchange captured. Client fallback to full re-auth visible.
ft-failure-pmkr1-mismatch.pcap · 1.2 MB notify me
security · eap-tls
EAP-TLS cert expiry — silent abort
RADIUS sends Access-Reject with no EAP message. Client retries 3 times then deauthenticates. Classic Monday morning outage.
eap-tls-cert-expiry-silent.pcap · 0.8 MB notify me
6 ghz · bss color
BSS Color collision — two APs, same color
Two 6 GHz APs sharing BSS Color 7. Spatial reuse disabled. OBSS PD threshold ignored. Performance impact measurable.
bss-color-collision-6ghz.pcap · 2.1 MB notify me
wi-fi 7 · mlo
MLO association — STR mode, 5+6 GHz
Full MLO setup exchange. EHT capabilities, per-STA profiles, and BIGTK negotiation all visible. U-MAC vs L-MAC clearly shown.
mlo-association-str-5-6ghz.pcap · 3.4 MB notify me
security · evil twin
Rogue AP — cipher downgrade attack
Rogue AP advertises same SSID with TKIP-only. All 4 detection pillars triggered: BSSID vendor, RSSI, cipher, beacon rate.
rogue-ap-cipher-downgrade.pcap · 1.6 MB notify me
deauth · security
Deauth flood — 802.11w not enforced
200 deauth frames in 4 seconds. PMF not enabled on SSID. All clients disconnect. Classic 802.11w enforcement failure.
deauth-flood-no-pmf.pcap · 0.6 MB notify me
// how to use these
01
Download any PCAP from this page
→
02
Go to app.wlananalyser.com
→
03
Upload the file — no account needed
→
04
212+ checks run automatically in <15 seconds
One post, every two weeks. No filler.
Protocol analysis, Wi-Fi 7 field notes, and new PCAPs for the Frame Lab.