rxsim。ReceiveOnSDR =假；

文件名=“capturedBeacons.mat”；

如果rxsim。ReceiveOnSDR rxsim。SDRDeviceName =“AD936x”；% SDR用于接收波形rxsim。RadioIdentifier =“192.168.3.2”；用于标识无线电的值，例如IP地址、USB端口或序列号30AD2D5rxsim。RadioSampleRate =20000000；%配置为20e6hz，因为这是信标传输BWrxsim。RadioGain =50；rxsim。FrequencyBand = 5;rxsim。ChannelNumbers =[32、36、40、44、48、52、56、60、64、100、104、108、112、116、120、124、128、132、136、140、144、149、153、157、161、165、169、173、177]；%默认扫描所有5 GHz信标通道rxsim。ReceiveAntenna =1；%配置为只使用单个天线工作rxsim。CaptureTime =毫秒(100)；希望类型为持续时间的值导出参数rxsim。CenterFrequencies = wlanChannelFrequency(rxsim.ChannelNumbers,rxsim.FrequencyBand);rxsim。NumSamplesToCapture = seconds(rxsim.CaptureTime)*rxsim.RadioSampleRate;其他的rx = load(fileName);rxsim。ChannelNumbers = rx.channels;rxsim。RadioSampleRate = rx.radioSampleRate;rxsim。频带= rx.band;导出参数rxsim。NumSamplesToCapture = size(rx.capturedWaveforms,1);结束osf = rxsim.RadioSampleRate/20e6;

retrieveVendorInfo =真正的；

displayAdditionalInfo =假；

displayScope =假；

如果rxsim。ReceiveOnSDR如果(rxsim匹配。SDRDeviceName, (“AD936x”，“FMCOMMS5”，“冥王星”，“E3xx”) sdrReceiver = sdrrx(.．.rxsim。SDRDeviceName,.．.BasebandSampleRate = rxsim。RadioSampleRate,.．.GainSource =“手动”）;如果(rxsim匹配。SDRDeviceName, (“AD936x”，“FMCOMMS5”，“E3xx”])当捕获波形时，跳过FPGA，拥有数据%直接发送到主机sdrReceiver。ShowAdvancedProperties = true;sdrReceiver。BypassUserLogic = true;sdrReceiver。IPAddress = rxsim.RadioIdentifier;其他的sdrReceiver。RadioID = rxsim.RadioIdentifier;结束其他的%表示USRP sdrsdrReceiver = com . sdrureceiver (.．.= rxsim平台。SDRDeviceName,.．.EnableBurstMode = true);确定突发捕获值每帧将有100个符号sdrReceiver。SamplesPerFrame = 4e-6*rxsim.RadioSampleRate*100;sdrReceiver。NumFramesInBurst = rxsim.NumSamplesToCapture/sdrReceiver.SamplesPerFrame;[sdrReceiver。MasterClockRate sdrReceiver。DecimationFactor] =.．.hGetUSRPRateInformation (rxsim.SDRDeviceName rxsim.RadioSampleRate);如果(rxsim匹配。SDRDeviceName, (“B200”，“B210”])根据需要更改USRP B200/B210的序列号sdrReceiver。SerialNum = rxsim.RadioIdentifier;其他的sdrReceiver。IPAddress = rxsim.RadioIdentifier;结束结束sdrReceiver。增益= rxsim.RadioGain;sdrReceiver。OutputDataType =“替身”；sdrReceiver。ChannelMapping = rxsim.ReceiveAntenna;结束

APs = struct(.．.“名称”[],“BSSID”[],“供应商”[],“SNR_dB”[],“Beacon_Channel”[],.．.“Operating_Channel”[],“Channel_Width_MHz”[],“乐队”[],“模式”[],.．.“MAC_Config”wlanMACFrameConfig,“波形”[],“抵消”[]);

生化武器=“CBW20”；cfg = wlanNonHTConfig(ChannelBandwidth=cbw);ind = wlanFieldIndices(cfg);indexAP = 1;

为i = 1:length(rxsim.ChannelNumbers) fprintf("扫描通道%d在波段%.1f.\n"rxsim.ChannelNumbers(我),rxsim.FrequencyBand);如果rxsim。ReceiveOnSDR sdrReceiver。CenterFrequency = rxsim. CenterFrequency (i);capturedData = capture波形(sdrReceiver,rxsim.NumSamplesToCapture);其他的capturedData = rx.capturedWaveforms(:，i);结束显示光谱和谱图如果displayScope% #好< * UNRCH >scope = spectrumAnalyzer(ViewType=“spectrum-and-spectrogram”, SampleRate = rxsim。RadioSampleRate,.．.TimeSpanSource =“财产”时间间隔= rxsim.NumSamplesToCapture / rxsim.RadioSampleRate);范围(capturedData);结束将捕获的数据重新采样到20mhz用于信标处理。如果osf ~= 1 capturedData = resample(capturedData,20e6,rxsim.RadioSampleRate);结束searchOffset = 0;而searchOffset <长度(capturedData)% recoverPreamble检测报文并分析非ht前缀。[preambleStatus,res] = recoverPreamble(capturedData,cbw,searchOffset);如果匹配(preambleStatus“未检测到数据包”）打破；结束检索同步数据，并按所做的使用LSTF能力进行扩展在recoverPreamble函数中。syncData = capturedData(res.PacketOffset+1:end)./sqrt(res.LSTFPower);syncData = frequencyOffset(syncData,rxsim.RadioSampleRate/osf，-res.CFOEstimate);在LLTF之后只需要4个OFDM符号(LSIG + 3个符号)%用于格式检测fmtDetect = syncData(ind.LSIG(1):(ind.LSIG(2)+4e-6*rxsim.RadioSampleRate/osf*3));[LSIGBits, failcheck] = wlanLSIGRecover(fmtDetect(1:4e-6*rxsim.RadioSampleRate/osf*1)，.．.res.ChanEstNonHT res.NoiseEstNonHT,生化武器);如果~failcheck format = wlanFormatDetect(fmtDetect,res.ChanEstNonHT,res.NoiseEstNonHT,cbw);如果匹配(格式,“Non-HT”）从L-SIG的前3位提取MCS。rate = double(bit2int(LSIGBits(1:3)，3));如果速率<= 1 cfg。MCS =速率+ 6;其他的cfg。MCS = mod(速率，6);结束从L-SIG确定PSDU长度。cfg。PSDULength = double(bit2int(LSIGBits(6:17)，12,0));ind.NonHTData = wlanFieldIndices(cfg，“NonHT-Data”）;如果双(ind.NonHTData (2) -ind.NonHTData (1)) >.．.长度(syncData (ind.NonHTData(1):结束))%当循环为未捕获完整数据包时退出。打破；结束nonHTData = syncData(ind.NonHTData(1):ind.NonHTData(2));bitsData = wlanNonHTDataRecover(nonHTData,res。ChanEstNonHT,.．.res.NoiseEstNonHT cfg);[cfgMAC， ~， decodeStatus] = wlanMPDUDecode(bitsData,cfg，.．.SuppressWarnings = true);打印所有成功数据包的附加信息如果~decodeStatus && displayAdditionalInfo payloadSize = floor(length(bitsData)/8);[调制，coate] = getRateInfo(cfg.MCS);流("有效载荷大小:%d |调制:%s |码率:%s \n",调制payloadSize coderate);流("类型:%s |子类型:%s"、cfgMAC.getType cfgMAC.getSubtype);结束从信标提取有关信道的信息。如果~decodeStatus && matches(cfgMAC.)FrameType,“灯塔”）用关于信标的信息填充表。如果isempty (cfgMAC.ManagementConfig.SSID) APs (indexAP)。名称=“隐藏”；其他的APs (indexAP)。名称=string(cfgMAC.ManagementConfig.SSID);结束流("<强>%s信标检测到频道%d在波段%.1f.\n"、APs (indexAP) .SSID rxsim.ChannelNumbers(我),rxsim.FrequencyBand);APs (indexAP)。BSSID= string(cfgMAC.Address3);如果retrieveVendorInfo APs (indexAP)。供应商=determineVendor(cfgMAC.Address3);其他的APs (indexAP)。供应商=“跳过”；结束(APs (indexAP)。模式,APs (indexAP)。Channel_Width_MHz, operatingChannel] =.．.determineMode (cfgMAC.ManagementConfig.InformationElements);如果isempty (operatingChannel)如果操作通道，默认为扫描通道%无法确定。operatingChannel = rxsim.ChannelNumbers(i);结束APs (indexAP)。Beacon_Channel = rxsim.ChannelNumbers(i);APs (indexAP)。operationing_channel = operatingChannel;APs (indexAP)。SNR_dB = res.LLTFSNR;APs (indexAP)。MAC_Config = cfgMAC;APs (indexAP)。Offset = res.PacketOffset; APs(indexAP).Waveform = capturedData; indexAP = indexAP + 1;结束%移动while循环下一次迭代的包搜索偏移量。searchOffset = res.PacketOffset + double(ind.NonHTData(2));其他的%包不是非ht;移位包搜索偏移10个OFDM符号(最小%非ht的包长度)用于while循环的下一次迭代。searchOffset = res.PacketOffset + 4e-6*rxsim.RadioSampleRate/osf*10;结束其他的% L-SIG恢复失败;移位包搜索偏移10个OFDM符号(最小%非ht的包长度)用于while循环的下一次迭代。searchOffset = res.PacketOffset + 4e-6*rxsim.RadioSampleRate/osf*10;结束结束结束

detectedBeaconsInfo = generateBeaconTable(ap,rxsim.FrequencyBand,retrieveVendorInfo)

如果rxsim。ReceiveOnSDR释放(sdrReceiver);结束

函数波形=捕获波形(sdrReceiver,numSamplesToCapture)返回给定的复值的列向量% srreceiver对象和一个标量NUMSAMPLESTOCAPTURE值。对于com . sdrureceiver对象，使用突发捕获技术来%获取波形如果isa (sdrReceiver“comm.SDRuReceiver”)波形=复杂(零(numSamplesToCapture,1));samplesPerFrame = sdrReceiver.SamplesPerFrame;为i = 1: srdrreceiver。NumFramesInBurst波形(samplesPerFrame*(i-1)+(1:samplesPerFrame)) = srdrreceiver ();结束其他的波形=捕获(sdrReceiver,numSamplesToCapture);结束结束函数[调制，coate] = getRateInfo(mcs)返回调制方案作为字符数组给定表示调制的标量整数的包的码率%编码方案开关mcs情况下0% BPSK调制=“BPSK”；coderate =“1/2”；情况下1% BPSK调制=“BPSK”；coderate =“3/4”；情况下2%正交相移编码调制=“正交相移编码”；coderate =“1/2”；情况下3.%正交相移编码调制=“正交相移编码”；coderate =“3/4”；情况下4% 16 qam调制=16 qam的；coderate =“1/2”；情况下5% 16 qam调制=16 qam的；coderate =“3/4”；情况下6% 64 qam调制=64 qam；coderate =“2/3”；否则% 64 qam调制=64 qam；coderate =“3/4”；结束结束函数vendor = determineVendor(mac)元素返回AP的供应商名称来自指定MAC地址的组织唯一标识符(OUI)。持续的Ouis vendor = strings(0);试一试如果isempty(是的)如果~ (“oui.csv”，“文件”) disp ("从IEEE注册中心下载oui.csv…"选项= weboptions(“超时”10);websave (“oui.csv”，“http://standards-oui.ieee.org/oui/oui.csv”、选择);结束可读的(“oui.csv”VariableNamingRule =“保存”）;结束从MAC地址中提取OUI。Oui = mac(1:6);根据OUI提取供应商名称。Vendor = string(cell2mat(ouis。（“机构名称”)(匹配(ouis.Assignment是的))));抓我重新抛出捕获的错误作为警告。警告(ME.message +要跳过determinevendoror函数调用，请将retrieveVendorInfo设置为false。[]);结束如果Isempty (vendor) vendor =“未知”；结束结束函数[mode,bw,operatingChannel] = determineMode(informationElements)确定AP使用的802.11标准。该函数检查是否存在HT、VHT和HE能力元素，并决定AP使用的802.11标准。的元素% id定义在IEEE Std 802.11-2020和IEEE Std 802.11ax-2021中。elementIDs = cell2mat(informationElements(:，1));id = elementIDs(:，1);如果任何(id = = 255)如果任何(elementIDs (id = = 255, 2) = = 35)% HE报文格式模式=“802.11斧头”；其他的模式=“未知”；结束vhtElement = informationElements{id ==192,2};htElement = informationElements{id ==61,2};[bw,operatingChannel] = determineChannelWidth(htElement,vhtElement);elseif任何(id = = 191)% VHT报文格式模式=“802.11交流”；vhtElement = informationElements{id ==192,2};htElement = informationElements{id ==61,2};[bw,operatingChannel] = determineChannelWidth(htElement,vhtElement);elseif任何(id = = 45)% HT报文格式模式=“802.11 n”；htElement = informationElements{id ==61,2};[bw,operatingChannel] = determineChannelWidth(htElement);其他的%非ht报文格式排除b，因为只支持DSSS金宝app模式=“802.11 a / g / j / p”；bw =“未知”；operatingChannel = [];结束结束函数[bw,operatingChannel] = determineChannelWidth(htElement,varargin)返回通道的带宽在IEEE Std 802.11-2020中定义的信标操作信息元素表11-23。msbFirst = false;%转换为位，以获得STA通道宽度值在第3位。htOperationInfoBits = int2bit(htElement(2)，5*8,msbFirst);operationingchannel = 0;如果nargin == 2 vhtElement = varargin{1};% VHT操作通道宽度字段CW = vhtElement(1);信道中心频率段0CCFS0 = vhtElement(2);信道中心频率段1CCFS1 = vhtElement(3);如果htOperationInfoBits(3) == 0 bw =“20”；operatingChannel = CCFS0;elseifCw == 0% HT操作通道宽度字段为1bw =“40”；operatingChannel = CCFS0;elseifCcfs1 == 0% HT操作通道宽度字段为1和% VHT操作通道宽度字段为1bw =“80”；operatingChannel = CCFS0;elseifabs(CCFS1 - CCFS0) == 8% HT操作通道宽度字段为1和% VHT操作通道宽度字段为1和% CCFS1大于0bw =“160”；operatingChannel = CCFS1;其他的% HT操作通道宽度字段为1和% VHT操作通道宽度字段为1和% CCFS1大于0和% |CCFS1 - CCFS0|大于16bw =“80 + 80”；结束结束如果operatingChannel == 0如果htOperationInfoBits(3) == 1 bw =“40”；secondaryChannelOffset = bit2int(htOperationInfoBits(1:2)，2,false);如果secondaryChannelOffset == 1次要通道高于主要通道。operatingChannel = htElement(1) + 2;elseifsecondaryChannelOffset == 3次要通道低于主要通道。operatingChannel = htElement(1) - 2;其他的警告(“无法确定操作通道。”）结束其他的bw =“20”；operatingChannel = htElement(1);结束结束结束函数tbl = generateBeaconTable(APs,band,retrieveVendorInfo)GENERATEBEACONTABLE将接入点结构转换为表和%清除变量名。tbl = struct2table(ap，“AsArray”,真正的);资源描述。Band = repmat(Band,length(tbl.SSID)，1);(TBL，[“SNR_dB”，“Beacon_Channel”，“Operating_Channel”，“Channel_Width_MHz”),.．.［“信噪比”(dB)，“主20 MHz信道”，“当前渠道中心频率指数”，.．."通道宽度(兆赫)"]);如果retrieveVendorInfo tbl = tbl(:，1:9);其他的TBL = TBL (:，[1:2,4:9]);结束结束