> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/reconnaissance-and-capture/airodump-environment-analysis-pt-1.md).
# Airodump 环境分析
使用 Airodump-ng 被动识别授权接入点和客户端。
`airodump-ng` 被动显示附近的无线接入点和客户端。请确保采集内容与已批准的评估范围一致。
{% hint style="warning" %}
仅限捕获获授权设备的数据。附近的网络可能会出现在输出中。
{% endhint %}
### 开始被动扫描
在监控模式接口上运行 Airodump-ng：
```bash
airodump-ng wlan0mon
```
扫描会在各信道之间跳转。该 `CH` 列显示每个接入点的信道。
### 读取接入点表
每一行代表一个已发现的接入点。
* `BSSID` 通过 MAC 地址标识接入点无线电。
* `PWR` 用于估计信号强度。 `-1` 表示该值不可用。
* `信标帧` 统计观察到的信标帧数量。
* `#Data` 统计捕获的数据帧数量。
* `CH` 显示工作信道。
* `MB` 显示通告的最大数据速率。
* `加密方式`, `密码算法`，以及 `认证方式` 概括通告的安全配置。
* `ESSID` 在广播时显示网络名称。
WPA2 搭配 `CCMP` 和 `PSK` 是家庭和小型办公室中常见的配置。
### 读取客户端表
下方表格列出观察到的无线客户端站点。 `站点` 显示客户端的 MAC 地址。
`BSSID` 将客户端与其所使用的接入点关联起来。标记为 `未关联` 的客户端可见，但当前未连接到接入点。
该 `探测` 字段可以列出客户端请求的网络名称。请将此信息视为敏感的评估数据。
### 建立评估基线
仅记录获授权的接入点和客户端。包括它们的信道、安全设置以及观察到的关联状态。
该基线有助于后续验证和报告。
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://hacking-notes.jord4n.pro/zh/hacking-wifi/wpa-wpa2-psk-network-attacks/reconnaissance-and-capture/airodump-environment-analysis-pt-1.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
