There are 2 types of scanning: passive scanning - mobile client will listen to predefined channels for beacons and active scanning - mobile client will send a probe request frame asking for specific Wi-Fi network it had been previously associated or all available Wi-Fi networks on specific channel. I will focus on the second option. … Continue reading null probe request