tree b74664527a6ab25461d68ff3582952a0e7fb2ec0
parent 5839464180190c0a3b532ae206b82647640f4b9f
author Denton Gentry <dgentry@google.com> 1476084827 -0700
committer Denton Gentry <dgentry@google.com> 1477951683 -0700

taxonomy: add iOS 10 & Dish signatures.

1. iOS 10.x introduced a new vendor-specific information element with an
   Apple OUI in the management frames sent by iOS 10 devices. It is present
   in the Probe Request and Associate Request, and contains 10 bytes of
   data.

   In every model of device we've sampled so far running iOS 10.0.2, it
   contains the same content: 0a00010400000000.

   Tag: Vendor Specific: Apple
       Tag Number: Vendor Specific (221)
       Tag length: 11
       OUI: 00-17-f2
       Vendor Specific
       OUI Type: 10
       Vendor Specific Data: 0a00010400000000

2. We made a mistake in gathering one of the earlier pcaps, uncovered
   when we gathered a signature with iOS10 on the same device: what
   we thought was an iPad 4th gen is actually an iPad Air 1st gen,
   model ME906LL.

   The earlier signature had led to the conclusion that iPad Air 4th
   gen and iPad Air 1st gen have the same signature. This is likely
   not true: we do not have an iPad 4th gen signature yet.

3. iOS 10 also changed the TX Power IE for several models, notably
   iPhone 6 and iPhone 6+ now have distinct signatures and can be
   distinguished.

3. Add Dish Networks Receiver

4. Anonymize MAC addresses in some of the previously submitted pcaps.

5. Rename some of the earlier pcaps to include model number, software
   version, and other metadata.

Change-Id: I2f4c44b87cc072c0209a1e8501f31c556b19d1ca