From a77c4485035c7cf591126e1cd09ac77d70284cd7 Mon Sep 17 00:00:00 2001 From: Yaro Kasear Date: Wed, 16 Apr 2025 11:05:54 -0500 Subject: [PATCH 1/2] Rename 'CiscoReportedClients' to 'CiscoAvgReportedClients' for consistency in main output --- enrich.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/enrich.py b/enrich.py index 4c28a37..1a357bb 100755 --- a/enrich.py +++ b/enrich.py @@ -456,7 +456,7 @@ def main(): 'AvgAPSignal': avg_signal, 'StrongestAPSignal': strongest_signal, 'UnlinkedDevices': unlinked, - 'CiscoReportedClients': cisco_avg_reported_clients, + 'CiscoAvgReportedClients': cisco_avg_reported_clients, 'CiscoMaxReportedClients': cisco_max_reported_clients }) From 3c9fe372ad29755d189e5a3dfece4b715de9880d Mon Sep 17 00:00:00 2001 From: Yaro Kasear Date: Wed, 16 Apr 2025 11:06:45 -0500 Subject: [PATCH 2/2] Update tag extraction in analyze_pcap to use internal field access for improved reliability --- enrich.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/enrich.py b/enrich.py index 1a357bb..b5d70e3 100755 --- a/enrich.py +++ b/enrich.py @@ -354,7 +354,7 @@ def analyze_pcap(pcapng_path, start_ts, end_ts, ap_bssid, ap_channel): try: mgt = packet.get_multiple_layers('wlan.mgt')[0] if hasattr(mgt, 'get_field'): - tags = mgt.get_field('tag') + tags = mgt._all_fields.get('wlan.tagged.all', {}).get('wlan.tag', []) if not tags: print("[DEBUG] wlan.mgt present, but no tags parsed.")