diff --git a/enrich.py b/enrich.py index d0a2e4d..58f1750 100755 --- a/enrich.py +++ b/enrich.py @@ -29,11 +29,16 @@ def parse_args(): return parser.parse_args() def analyze_pcap(pcapng_path, start_ts, end_ts, ap_bssid, ap_channel): + display_filter = ( + "(wlan.fx.type_subtype == 8 || wlan.fx.type_subtype == 5 || wlan.fc.type == 2) && " + "(wlan.bssid || wlan.sa || wlan.da)" + ) cap = pyshark.FileCapture( pcapng_path, use_json=True, include_raw=False, - keep_packets=False + keep_packets=False, + display_filter=display_filter ) ap_channel = int(ap_channel)