Try it: analyze a wardrive log

This is our working wardrive-log analyzer: the example is a synthetic walk of the fictional Riverbend Convention Center (112 networks, one planted evil twin), or drop in your own WiGLE wardrive CSV and analyze your real venue. It maps every access point it saw, breaks down encryption, shows channel crowding, and flags name or hardware anomalies for venue IT to investigate. It cannot prove whether an access point is an impersonator. Everything runs in this tab, in your browser.

Your event's official network name

The lab flags less-common hardware prefixes, look-alike names, open networks, and WEP relics. Compare with an approved BSSID/security inventory; a clean report cannot rule out impersonation.

Findings

Encryption breakdown

Observed networks by channel (not airtime utilization)

Where the access points are

Positions come from the GPS fixes in the log, so they mark where each network was heard, not where its router physically sits. Dots ringed in white broadcast your official network name.

Strongest signals

Network	BSSID	Security	Ch	Signal

How this lab works

WiGLE-format CSV in, answers out. The lab reads the standard wardrive export: an optional metadata line, then MAC,SSID,AuthMode,FirstSeen,Channel,RSSI,CurrentLatitude,CurrentLongitude,AltitudeMeters,AccuracyMeters,Type. Columns are matched by header name, so exports with extra columns still parse.
Evil-twin check. Every access point broadcasting your official name is grouped by hardware vendor prefix (the first three octets of the BSSID). Less-common prefixes and open networks get flagged for investigation. Legitimate fleets may use several vendors, and an impersonator may use a matching prefix.
Look-alike check. Names containing yours, or within two edits of it (RiverbendExpo vs RiverbendExpo_Free), get flagged as possible typosquats.
Passive data only. A wardrive log holds beacon frames: names, signal strengths, and positions. It says nothing about who connected or what they did, and this lab could not tell you if it wanted to.
Looks right in light and dark mode. The lab reads the site's theme and repaints the map the moment you toggle it.
Memory only. Your data lives in this tab's memory. Close the tab and it is gone; Forget my data wipes it sooner.

Starter kit

The starter kit holds the pre-event walk field checklist, the synthetic Riverbend walk CSV used in this lab, a rogue-AP identification one-pager, and a fill-in walk report template. Free with your email through the form below; the download link appears after you subscribe.