Because probe requests contain the source MAC address and often the SSIDs of saved networks, they are widely used for:
A Probe Request frame is a management frame (Type 00) with a subtype of 0101. It consists of the following key fields: probe request frame
The Probe Request frame is a fundamental component of Wi-Fi connectivity, enabling rapid network discovery and seamless roaming. However, its unencrypted nature makes it a double-edged sword; while essential for network logic, it serves as a primary data source for surveillance and device fingerprinting. As privacy concerns grow, the evolution of probe request handling—specifically MAC randomization and encrypted Wi-Fi pre-association discovery—remains a critical area of protocol development. Because probe requests contain the source MAC address
When an AP receives a Probe Request frame, it responds with a , which includes: As privacy concerns grow, the evolution of probe
: If SSID is set to empty (or " broadcast), the device is probing for all nearby APs. If SSID is a specific name, it’s looking for a particular network.
Probe Request frames are used in various scenarios, such as: