Cobra
9b2f747775
Passive ARP sniffing fails on modern WiFi because the AP intercepts ARP broadcasts and responds on behalf of clients. Active scanning sends who-has to all 254 /24 addresses and collects replies directly, making presence detection reliable regardless of AP configuration. Also adds monitor mode sniffer thread that activates automatically if a second WiFi interface is present (e.g. USB dongle). Reads raw 802.11 frames, bypassing the AP stack entirely for station-transmitted data and management frames.