BSS and ESSID
BSSID identifies the AP radio; ESSID is the network name — know both for $LAB_SSID.
Visual · wireless_bss_essid
BSS/BSSID/ESSID literacy. $LAB_SSID only. Original Cyberlium.
SSID is the name on the poster; BSSID is the MAC on the door — defenders track both.
A Basic Service Set (BSS) is an AP plus associated STAs. The BSSID is usually the AP radio MAC. The ESSID (SSID) is the human-readable name like $LAB_SSID. Multiple APs can share an ESSID (ESS) but each has its own BSSID. Rogue detection compares expected BSSIDs to beacons. You learn to read these fields in beacons and probe responses on YOUR lab AP — not to clone stranger ESSIDs on public air. Next: Open Personal Enterprise.
1. BSSID vs ESSID vs SSID
ESSID is the network name clients select. BSSID identifies which AP radio you joined. In captures, filter on BSSID when you want one AP, on ESSID when you want the name $LAB_SSID.
Evil twins copy ESSIDs but differ in BSSID and security — defenders alert on clones; attackers abuse trust. This course names the pattern; Module 7 covers rogue literacy.
Command guide
Try these commands — BSSID vs ESSID vs SSID
═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)
BSS/ESSID — https://www.wi-fi.org/knowledge-center/glossary nmcli docs — https://networkmanager.dev/docs/api/latest/nmcli.html
═══ INSTALL ═══
Linux (Debian/Ubuntu):
Command — copy this
sudo apt install network-manager sudo apt install iw
macOS: Use airport / System Settings Prefer Linux lab VM for iw
Windows: Use netsh wlan (built-in) Use Kali VM / WSL with iw
═══ LINUX / macOS ═══
Command — copy this
nmcli -f SSID,BSSID,SIGNAL,SECURITY device wifi list 2>/dev/null | head -20 iw dev 2>/dev/null | grep -E 'Interface|ssid|type' || nmcli device show 2>/dev/null | head -20
Primary tools to practice this lesson: nmcli, iw. Reference sites: BSS/ESSID (https://www.wi-fi.org/knowledge-center/glossary); nmcli docs (https://networkmanager.dev/docs/api/latest/nmcli.html). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.
2. Hidden SSIDs are not hidden security
Suppressed SSID beacons still leak in probes and association frames. Treat hidden SSID as obscurity, not control.
Document expected BSSID(s) for $LAB_SSID in your lab inventory like a blue-team allow list.
3. Lab filter habit
Before any capture tool, write: expected ESSID=$LAB_SSID, expected BSSID=your lab MAC. If beacons do not match, stop — wrong radio.
Next lesson compares open, personal (PSK), and enterprise auth modes.
4. What you ship: BSSID + ESSID row for lab AP
Table: ESSID $LAB_SSID, BSSID (your AP MAC), band/channel. No neighbor ESSIDs. chmod 600.
5. What you record before the next lesson
Date. $LAB_SSID ESSID and BSSID. File t15-m02-l02-bss-essid.txt chmod 600.
6. Wrong vs right: stranger SSIDs vs YOUR lab AP
Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.
- Wrong: Join any ESSID named 'Free WiFi' for practice. Log every BSSID in the building.
- Right: Record YOUR lab BSSID/ESSID pair. Next: Open Personal Enterprise.
Mission: map YOUR lab BSS identity
1) Record ESSID $LAB_SSID and AP BSSID. 2) Note hidden-SSID is not security. 3) No neighbor ESSID list. Never clone public ESSIDs.
Stuck? Ask Cyberlium AI Mentor
Mesh systems may show multiple BSSIDs per ESSID — still document YOUR lab gear.
APPLY: BSSID most often identifies:
APPLY: True or False: Hidden SSID means attackers cannot learn the network name.
APPLY: Before lab capture, you should know: