Skip to content
Just Call Me Koko edited this page Sep 7, 2026 · 1 revision

Recon

Menu Path

Recon>Start WiFi
Recon>Start BLE

Info

Recon records a complete collection session instead of only showing a temporary scan list. It is intended for authorized surveying, field collection, and later analysis of the radio environment.

WiFi Recon records observed access points, stations, probe requests, repeat sightings, changing observations, and observed station-to-access-point relationships. BLE Recon records detected BLE devices, repeat sightings, signal changes, and a best-effort device-type label when one can be inferred from advertisement data.

When an SD card is available, each run is stored in its own directory under /recon using a sequential mission name such as /recon/m0042/.

Starting a Mission

  1. Insert an SD card before starting Recon.
  2. From the main menu, select Recon.
  3. Select Start WiFi or Start BLE.
  4. Allow the mission to run while moving through the authorized survey area.
  5. Exit Recon normally to close the mission and mark it complete.

Only one scan can run at a time. Stop any existing scan before starting Recon.

Live Dashboard

The dashboard updates once per second and shows elapsed time, observation counters, recent activity, RSSI levels, and GPS-fix state when GPS is installed. WiFi mode also summarizes channel activity, 2.4/5 GHz balance, environmental churn, and recent AP, station, and probe activity. BLE mode shows detected devices and updated sightings with device-type labels when available.

Mission Files

A Recon mission can contain:

  • session.json - mission mode, state, duration, counters, GPS-fix state, and file references
  • obs.rlog - AP, station, BLE, repeat, and change observations
  • probes.rlog - observed WiFi probe requests
  • relations.rlog - observed station/AP relationships
  • A PCAP capture when the selected mode produces one

Keep the complete mission directory together. The binary .rlog files are authoritative source data and are intended to be processed with the Recon Desktop Tool.

An observed probe or relationship is evidence of radio activity, not proof of ownership, identity, or a current association.

CLI Usage

recon wifi
recon ble
recon status
recon stop

recon status prints whether Recon is active. recon stop closes the current Recon mission and stops its scan.

Clone this wiki locally