I have aircrack-ng 1.2 beta 3 and I wanted to know how I can find the wireless MAC address (aka BSSID) of any wireless access point with aircrack-ng (or any other program).

I am currently running Ubuntu 14.10.

  • MAC address of a network? Dec 15, 2014 at 3:23
  • 2
    I'm 90% sure (s)he means an access point/router's WAN MAC Address a.k.a. "wireless MAC address (also called as BSSID)" as described in en.wikipedia.org/wiki/Rogue_access_point . "Why no one no help?"
    – Xen2050
    Dec 15, 2014 at 6:02
  • This answer looks to be the right direction to go askubuntu.com/a/351517/129271
    – Xen2050
    Dec 15, 2014 at 6:11
  • And doesn't the default network manager show the BSSID's of available (visible) AP's, no aircrack required?
    – Xen2050
    Dec 15, 2014 at 6:18
  • With Ubuntu, you can also use nmcli -f BSSID dev wifi list. See this or this answer on askubuntu.
    – mivk
    Jan 4, 2021 at 23:54

1 Answer 1


Use iw device scan to show all information about currently visible networks. The output has more than an entire screenful per network, so use grep to trim it down:

$ sudo iw wlan0 scan | egrep "^BSS|SSID:"
BSS 24:a4:3c:9e:d2:84(on wlan0) -- associated
    SSID: eduroam
BSS 24:a4:3c:ae:df:83(on wlan0)
    SSID: Example multi-AP network
BSS dc:9f:db:30:c1:7a(on wlan0)
    SSID: Example multi-AP network
BSS 00:19:3b:99:e2:80(on wlan0)
    SSID: TEO Wi-Fi

For some very old Wi-Fi card drivers, you'll need the iwlist device scan tool instead:

$ sudo iwlist wlan0 scan | egrep "Address:|ESSID:"
          Cell 01 - Address: 24:A4:3C:9E:D2:84
          Cell 02 - Address: 24:A4:3C:AE:DF:83
                    ESSID:"Example multi-AP network"
          Cell 03 - Address: DC:9F:DB:30:C1:7A
                    ESSID:"Example multi-AP network"
          Cell 04 - Address: 24:A4:3C:9E:D2:16
                    ESSID:"Example multi-AP network"

Aircrack also comes with the airodump-ng tool which repeatedly shows all networks it sees. (You need to enable monitor mode first, using airmon-ng.)

  • Isn't a BSSID the IP Address? Dec 15, 2014 at 22:05
  • No, it isn't. Wi-Fi access points are similar to Ethernet switches – they only care about Ethernet packets and a specific device is identified by its MAC address and "Basic Service Set ID" is just a fancy name for that. (While most APs do have IP addresses for purpose of adjusting configuration, usually you cannot find that out in any way.) Dec 16, 2014 at 7:39

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .