taxonomy: add iOS 10 & Dish signatures.
1. iOS 10.x introduced a new vendor-specific information element with an
Apple OUI in the management frames sent by iOS 10 devices. It is present
in the Probe Request and Associate Request, and contains 10 bytes of
data.
In every model of device we've sampled so far running iOS 10.0.2, it
contains the same content: 0a00010400000000.
Tag: Vendor Specific: Apple
Tag Number: Vendor Specific (221)
Tag length: 11
OUI: 00-17-f2
Vendor Specific
OUI Type: 10
Vendor Specific Data: 0a00010400000000
2. We made a mistake in gathering one of the earlier pcaps, uncovered
when we gathered a signature with iOS10 on the same device: what
we thought was an iPad 4th gen is actually an iPad Air 1st gen,
model ME906LL.
The earlier signature had led to the conclusion that iPad Air 4th
gen and iPad Air 1st gen have the same signature. This is likely
not true: we do not have an iPad 4th gen signature yet.
3. iOS 10 also changed the TX Power IE for several models, notably
iPhone 6 and iPhone 6+ now have distinct signatures and can be
distinguished.
3. Add Dish Networks Receiver
4. Anonymize MAC addresses in some of the previously submitted pcaps.
5. Rename some of the earlier pcaps to include model number, software
version, and other metadata.
Change-Id: I2f4c44b87cc072c0209a1e8501f31c556b19d1ca
60 files changed
