<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Performing Wi-Fi Deauthentication Detection — API & Tool Reference

> Quick reference for tools, commands, and APIs used in performing-wifi-deauthentication-detection.

## Tools


### `tshark`

802.11 management frame analysis

**Usage:**
```bash
tshark -i <interface> -Y <filter>
```

**Key Flags:**
  - `-Y: display filter`
  - `-T fields: structured output`
  - `-q -z io,stat: statistics`
  - `-a duration: time limit`

---

### `airodump-ng`

Wireless monitoring with deauth indicator

**Usage:**
```bash
airodump-ng <interface>
```

**Key Flags:**
  - `-c: channel`
  - `--bssid: target AP`
  - `-w: output file`

---

### `mdk4`

Wireless attack testing framework

**Usage:**
```bash
mdk4 <interface> d -B <bssid>
```

**Key Flags:**
  - `d: deauthentication test`
  - `-B: target BSSID`
  - `-c: channel`

---


## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Wireless Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
