rxsim。ReceiveOnSDR =假；

文件名=“capturedBeacons.mat”；

如果rxsim。ReceiveOnSDR rxsim。SDRDeviceName =“AD936x”；用于波形接收的% SDRrxsim。RadioIdentifier =“192.168.3.2”；%用于标识无线电的值，例如IP地址、USB端口或序列号30AD2D5rxsim。RadioSampleRate =20000000；%配置为20e6 Hz，因为这是信标传输BWrxsim。RadioGain =50；rxsim。FrequencyBand = 5;rxsim。ChannelNumbers =[32、36、40、44、48、52、56、60、64、100、104、108、112、116、120、124、128、132、136、140、144、149、153、157、161、165、169、173、177]；% Default扫描所有5 GHz信标通道rxsim。ReceiveAntenna =1；配置为只使用一个天线工作rxsim。CaptureTime =毫秒(100)；期望类型为持续时间的值%派生参数rxsim。中心频率= wlanChannelFrequency(rxsim.ChannelNumbers,rxsim.FrequencyBand);rxsim。NumSamplesToCapture = seconds(rxsim.CaptureTime)*rxsim.RadioSampleRate;其他的rx = load(fileName);rxsim。ChannelNumbers = rx.channels;rxsim。RadioSampleRate = rx.radioSampleRate;rxsim。FrequencyBand = rx.band;%派生参数rxsim。NumSamplesToCapture = size(rx.capturedWaveforms,1);结束osf = rxsim.RadioSampleRate/20e6;

retrieveVendorInfo =真正的；

displayAdditionalInfo =假；

displayScope =假；

如果rxsim。ReceiveOnSDR如果(rxsim匹配。SDRDeviceName, (“AD936x”，“FMCOMMS5”，“冥王星”，“E3xx”) sdrReceiver = sdrrx(.．.rxsim。SDRDeviceName,.．.BasebandSampleRate = rxsim。RadioSampleRate,.．.GainSource =“手动”）;如果(rxsim匹配。SDRDeviceName, (“AD936x”，“FMCOMMS5”，“E3xx”])当捕获波形时，跳过FPGA并获得数据%直接发送到主机sdrReceiver。ShowAdvancedProperties = true;sdrReceiver。BypassUserLogic = true;sdrReceiver。IPAddress = rxsim.RadioIdentifier;其他的sdrReceiver。RadioID = rxsim.RadioIdentifier;结束其他的%表示USRP特别提款权sdrReceiver = comm. sdrReceiver (.．.= rxsim平台。SDRDeviceName,.．.EnableBurstMode = true);确定突发捕获值每帧将有100个符号sdrReceiver。SamplesPerFrame = 4e-6*rxsim.RadioSampleRate*100;sdrReceiver。NumFramesInBurst = rxsim.NumSamplesToCapture/sdrReceiver.SamplesPerFrame;[sdrReceiver。MasterClockRate sdrReceiver。DecimationFactor] =.．.hGetUSRPRateInformation (rxsim.SDRDeviceName rxsim.RadioSampleRate);如果(rxsim匹配。SDRDeviceName, (“B200”，“B210”])%根据需要更改USRP B200/B210的序列号sdrReceiver。SerialNum = rxsim.RadioIdentifier;其他的sdrReceiver。IPAddress = rxsim.RadioIdentifier;结束结束sdrReceiver。增益= rxsim.RadioGain;sdrReceiver。OutputDataType =“替身”；sdrReceiver。ChannelMapping = rxsim.ReceiveAntenna;结束

APs = struct(.．.“名称”[],“BSSID”[],“供应商”[],“SNR_dB”[],“Beacon_Channel”[],.．.“Operating_Channel”[],“Channel_Width_MHz”[],“乐队”[],“模式”[],.．.“MAC_Config”wlanMACFrameConfig,“波形”[],“抵消”[]);

生化武器=“CBW20”；cfg = wlanNonHTConfig(ChannelBandwidth=cbw);ind = wlanFieldIndices(cfg);indexAP = 1;

为i = 1:length(rxsim.ChannelNumbers) fprintf(<强>扫描通道%d在波段%.1f.\n"rxsim.ChannelNumbers(我),rxsim.FrequencyBand);如果rxsim。ReceiveOnSDR sdrReceiver。CenterFrequency = rxsim. CenterFrequency (i);capturedData = capture波形(sdrReceiver,rxsim.NumSamplesToCapture);其他的capturedData = rx.capturedWaveforms(:，i);结束显示光谱和谱图如果displayScope% #好< * UNRCH >scope = spectrum alyzer(ViewType=“spectrum-and-spectrogram”, SampleRate = rxsim。RadioSampleRate,.．.TimeSpanSource =“财产”时间间隔= rxsim.NumSamplesToCapture / rxsim.RadioSampleRate);范围(capturedData);结束重新采样捕获的数据到20兆赫，用于信标处理。如果osf ~= 1 capturedData = resample(capturedData,20e6,rxsim.RadioSampleRate);结束searchOffset = 0;而searchOffset <长度(capturedData)% recoverPreamble检测报文，并对非ht前导进行分析。[preambleStatus,res] = recoverPreamble(capturedData,cbw,searchOffset);如果匹配(preambleStatus"未检测到数据包"）打破；结束检索同步数据并按所完成的LSTF功率缩放它%在recoverPreamble函数中。syncData = capturedData(res.PacketOffset+1:end)./sqrt(res.LSTFPower);syncData = frequencyOffset(syncData,rxsim.RadioSampleRate/osf，-res.CFOEstimate);在LLTF之后只需要4个OFDM符号(LSIG + 3个以上的符号)用于格式检测的%fmtDetect = syncData(ind.LSIG(1):(ind.LSIG(2)+4e-6*rxsim.RadioSampleRate/osf*3));[LSIGBits, failcheck] = wlanLSIGRecover(fmtDetect(1:4e-6*rxsim.RadioSampleRate/osf*1)，.．.res.ChanEstNonHT res.NoiseEstNonHT,生化武器);如果~failcheck format = wlanFormatDetect(fmtDetect,res.ChanEstNonHT,res.NoiseEstNonHT,cbw);如果匹配(格式,“Non-HT”）从L-SIG的前3位提取MCS。rate = double(bit2int(LSIGBits(1:3)，3));如果速率<= 1 cfg。MCS =速率+ 6;其他的cfg。MCS = mod(速率，6);结束从L-SIG中确定PSDU长度。cfg。PSDULength = double(bit2int(LSIGBits(6:17)，12,0));ind.NonHTData = wlanFieldIndices(cfg，“NonHT-Data”）;如果双(ind.NonHTData (2) -ind.NonHTData (1)) >.．.长度(syncData (ind.NonHTData(1):结束))%退出时，循环作为完整的包未捕获。打破；结束nonHTData = syncData(ind.NonHTData(1):ind.NonHTData(2));bitsData = wlanNonHTDataRecover(nonHTData,res.)ChanEstNonHT,.．.res.NoiseEstNonHT cfg);[cfgMAC， ~， decodeStatus] = wlanMPDUDecode(bitsData,cfg，.．.SuppressWarnings = true);在所有成功的数据包上打印附加信息如果~decodeStatus && displayAdditionalInfo payloadSize = floor(length(bitsData)/8);[调制，coderate] = getRateInfo(cfg.MCS);流("有效载荷大小:%d |调制:%s |码率:%s \n",调制payloadSize coderate);流("类型:%s |子类型:%s"、cfgMAC.getType cfgMAC.getSubtype);结束从信标提取有关通道的信息。。如果~decodeStatus && matches(cfgMAC。FrameType,“灯塔”）%用有关信标的信息填充表。如果isempty (cfgMAC.ManagementConfig.SSID) APs (indexAP)。名称=“隐藏”；其他的APs (indexAP)。名称=string(cfgMAC.ManagementConfig.SSID);结束流("<强>%s信标检测到频道%d在波段%.1f.\n"、APs (indexAP) .SSID rxsim.ChannelNumbers(我),rxsim.FrequencyBand);APs (indexAP)。BSSID= string(cfgMAC.Address3);如果retrieveVendorInfo APs (indexAP)。供应商=determineVendor(cfgMAC.Address3);其他的APs (indexAP)。供应商=“跳过”；结束(APs (indexAP)。模式,APs (indexAP)。Channel_Width_MHz, operatingChannel] =.．.determineMode (cfgMAC.ManagementConfig.InformationElements);如果isempty (operatingChannel)%默认为扫描通道，如果操作通道%无法确定。operatingChannel = rxsim.ChannelNumbers(i);结束APs (indexAP)。Beacon_Channel = rxsim.ChannelNumbers(i);APs (indexAP)。operationing_channel = operatingChannel;APs (indexAP)。SNR_dB = res.LLTFSNR;APs (indexAP)。MAC_Config = cfgMAC;APs (indexAP)。Offset = res.PacketOffset; APs(indexAP).Waveform = capturedData; indexAP = indexAP + 1;结束%移动while循环下次迭代的包搜索偏移量。searchOffset = res.PacketOffset + double(ind.NonHTData(2));其他的%包不是非ht;移动包搜索偏移10个OFDM符号(最小值%非ht的包长度)用于while循环的下一次迭代。searchOffset = res.PacketOffset + 4e-6*rxsim.RadioSampleRate/osf*10;结束其他的% L-SIG恢复失败;移动包搜索偏移10个OFDM符号(最小值%非ht的包长度)用于while循环的下一次迭代。searchOffset = res.PacketOffset + 4e-6*rxsim.RadioSampleRate/osf*10;结束结束结束

detectedBeaconsInfo = generateBeaconTable(APs,rxsim.FrequencyBand,retrieveVendorInfo)

如果rxsim。ReceiveOnSDR释放(sdrReceiver);结束

函数波形= capture波形(sdrReceiver,numSamplesToCapture)返回给定的复值的列向量对象和标量NUMSAMPLESTOCAPTURE值。对于com . sdrureceiver对象，使用突发捕获技术来%获取波形如果isa (sdrReceiver“comm.SDRuReceiver”)波形=复数(零(numSamplesToCapture,1));samplesPerFrame = sdrReceiver.SamplesPerFrame;为i = 1:sdrReceiver。NumFramesInBurst波形(samplesPerFrame*(i-1)+(1:samplesPerFrame)) = sdrReceiver();结束其他的波形=捕获(sdrReceiver,numSamplesToCapture);结束结束函数[调制，编码]= getRateInfo(mcs)% GETRATEINFO以字符数组的形式返回调制方案给定表示调制的标量整数的包的码率%编码方案开关mcs情况下0% BPSK调制=“BPSK”；coderate =“1/2”；情况下1% BPSK调制=“BPSK”；coderate =“3/4”；情况下2%正交相移编码调制=“正交相移编码”；coderate =“1/2”；情况下3.%正交相移编码调制=“正交相移编码”；coderate =“3/4”；情况下4% 16 qam调制=16 qam的；coderate =“1/2”；情况下5% 16 qam调制=16 qam的；coderate =“3/4”；情况下6% 64 qam调制=64 qam；coderate =“2/3”；否则% 64 qam调制=64 qam；coderate =“3/4”；结束结束函数vendor = determineVendor(mac)% DETERMINEVENDOR返回AP的供应商名称来自指定MAC地址的组织唯一标识符。持续的Ouis vendor = strings(0);试一试如果isempty(是的)如果~ (“oui.csv”，“文件”) disp (“从IEEE注册授权机构下载ui.csv…”)选项= weboptions(“超时”10);websave (“oui.csv”，“http://standards-oui.ieee.org/oui/oui.csv”、选择);结束可读的(“oui.csv”VariableNamingRule =“保存”）;结束从MAC地址提取OUI。Oui = mac(1:6);根据OUI提取供应商名称。Vendor = string(cell2mat(ouis。（“机构名称”)(匹配(ouis.Assignment是的))));抓我%重新抛出捕获的错误作为警告。警告(ME.message +要跳过determinevendoror函数调用，请设置retrieveVendorInfo为false。[]);结束如果Isempty (vendor) vendor =“未知”；结束结束函数[mode,bw, operingchannel] = determineMode(informationElements)% DETERMINEMODE决定AP使用的802.11标准。该函数检查是否存在HT、VHT和HE能力%元素，并确定AP使用的802.11标准。的元素% id在IEEE Std 802.11-2020和IEEE Std 802.11ax-2021中定义。elementIDs = cell2mat(informationElements(:，1));IDs = elementIDs(:，1);如果任何(id = = 255)如果任何(elementIDs (id = = 255, 2) = = 35)% HE报文格式模式=“802.11斧头”；其他的模式=“未知”；结束vhtElement = informationElements{IDs==192,2};htElement = informationElements{IDs==61,2};[bw,operatingChannel] = determineChannelWidth(htElement,vhtElement);elseif任何(id = = 191)VHT报文格式模式=“802.11交流”；vhtElement = informationElements{IDs==192,2};htElement = informationElements{IDs==61,2};[bw,operatingChannel] = determineChannelWidth(htElement,vhtElement);elseif任何(id = = 45)% HT报文格式模式=“802.11 n”；htElement = informationElements{IDs==61,2};[bw,operatingChannel] = determineChannelWidth(htElement);其他的非ht报文格式%排除b，因为只支持DSSS万博1manbetx模式=“802.11 a / g / j / p”；bw =“未知”；operatingChannel = [];结束结束函数[bw,operatingChannel] = determineChannelWidth(htElement,varargin)对象返回通道的带宽%信标操作信息元素定义在IEEE Std 802.11-2020表11-23。msbFirst = false;%转换为位得到STA通道宽度值在第3位。htOperationInfoBits = int2bit(htElement(2)，5*8,msbFirst);operationingchannel = 0;如果nargin == 2 vhtElement = varargin{1};VHT操作通道宽度字段CW = vhtElement(1);信道中心频率段0CCFS0 = vhtElement(2);信道中心频率段CCFS1 = vhtElement(3);如果htOperationInfoBits(3) == 0 bw =“20”；operatingChannel = CCFS0;elseifCw == 0操作通道宽度字段为1bw =“40”；operatingChannel = CCFS0;elseifCcfs1 == 0操作通道宽度字段为1和操作通道宽度字段为1bw =“80”；operatingChannel = CCFS0;elseifabs(CCFS1 - CCFS0) == 8操作通道宽度字段为1和操作通道宽度字段为1和% CCFS1大于0bw =“160”；operationingchannel = CCFS1;其他的操作通道宽度字段为1和操作通道宽度字段为1和% CCFS1大于0且% |CCFS1 - CCFS0|大于16bw =“80 + 80”；结束结束如果operatingChannel == 0如果htOperationInfoBits(3) == 1 bw =“40”；secondaryChannelOffset = bit2int(htOperationInfoBits(1:2)，2,false);如果secondaryChannelOffset == 1次要通道高于主通道。operationingchannel = htElement(1) + 2;elseifsecondaryChannelOffset == 3次要通道低于主通道。operationingchannel = htElement(1) - 2;其他的警告(“无法确定运营渠道。”）结束其他的bw =“20”；operatingChannel = htElement(1);结束结束结束函数tbl = generateBeaconTable(APs,band,retrieveVendorInfo)GENERATEBEACONTABLE将接入点结构转换为表和%清理变量名。tbl = struct2table(APs，“AsArray”,真正的);资源描述。Band = repmat(Band,length(tbl.SSID)，1);TBL = renamevars(TBL，[“SNR_dB”，“Beacon_Channel”，“Operating_Channel”，“Channel_Width_MHz”),.．.［“信噪比”(dB)，“主20兆赫频道”，“当前渠道中心频率指数”，.．."通道宽度(兆赫)"]);如果retrievendorinfo tbl = tbl(:，1:9);其他的TBL = TBL (:，[1:2,4:9]);结束结束