Clément Durand wrote, on Mon, 11 Aug 2014 19:46:01 +0000:

Both iwlist & iwconfig exist, so I will try to learn their syntax.

Running iwconfig first, it tells me "ath0" is the NIC of interest:

$ ssh 192.168.1.20 -l ubnt

XM.v5.5.8# iwconfig
lo no wireless extensions.
eth0 no wireless extensions.
eth1 no wireless extensions.
wifi0 no wireless extensions.
br0 no wireless extensions.
ath0
IEEE 802.11ng ESSID:"ROCKET_M2" Nickname:"Rocket_WiFi"
Mode:Managed Frequency:2.417 GHz Access Point: 00:AF:00:BFA:48
Bit Rate:104 Mb/s Tx-Power=26 dBm Sensitivity:0/0
Retryff RTS thrff Fragment thrff
Encryption key:0922-02A0-4792-CBFA-A89F-1CDC
Security mode:restricted
Power Managementff
Link Quality=40/94 Signal level=-56 dBm Noise level=-88 dBm
Rx invalid nwid:7 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:0 Missed beacon:0

Then, running "iwlist ath0", I find out some information.

This looks like it gives me the local access points nearby:

XM.v5.5.8# iwlist ath0 ap
ath0 Peers/Access-Points in range:
DA:8FC:14:E2:BC Quality=46/94 Signal level=-50 dBm Noise level=-96 dBm
10:57:22:9F:AC:5E Quality=41/94 Signal level=-55 dBm Noise level=-88 dBm
10:90:48:69:92:33 Quality=22/94 Signal level=-74 dBm Noise level=-88 dBm
CC:C8:55:8C:6F:41 Quality=18/94 Signal level=-78 dBm Noise level=-88 dBm
CA:8F:15:27:97:68 Quality=18/94 Signal level=-78 dBm Noise level=-96 dBm
61:3A:4C:E5:B91 Quality=16/94 Signal level=-80 dBm Noise level=-88 dBm
91:72:4F:1F:91:1C Quality=16/94 Signal level=-80 dBm Noise level=-88 dBm
15:80:4E:69:92:34 Quality=16/94 Signal level=-80 dBm Noise level=-88 dBm
10:15:8D:AC:03:88 Quality=15/94 Signal level=-81 dBm Noise level=-88 dBm
F11:F9:12:9D:1E Quality=15/94 Signal level=-81 dBm Noise level=-88 dBm
21:C9:80:F3:98:7C Quality=10/94 Signal level=-86 dBm Noise level=-88 dBm
1B:12:C6:22:24:9F Quality=09/94 Signal level=-87 dBm Noise level=-88 dBm
10:1C:63:2B:4F:47 Quality=09/94 Signal level=-87 dBm Noise level=-88 dBm
F1:13:4E:10:35:4F Quality=09/94 Signal level=-87 dBm Noise level=-88 dBm
18:0F:C3:F30:66 Quality=07/94 Signal level=-89 dBm Noise level=-96 dBm
1A:23:87:1C:F7:17 Quality=07/94 Signal level=-89 dBm Noise level=-96 dBm

This seems to list the rooftop radio transmit power:
XM.v5.5.8# iwlist ath0 txpower
ath0 8 available transmit-powers :
10 dBm (10 mW)
16 dBm (39 mW)
18 dBm (63 mW)
20 dBm (100 mW)
22 dBm (158 mW)
24 dBm (251 mW)
26 dBm (398 mW)
28 dBm (630 mW)
Current Tx-Power=24 dBm (251 mW)

This seems to scan for all the WiFi routers in the vicinity of the rooftop
radio:
XM.v5.5.8# iwlist ath0 scanning
It lists dozens of "cells", here's just one example:
Cell 02 - Address: 00:A0:55:AC:83:2A
ESSID:"Netgear"
Mode:Master
Frequency:2.417 GHz (Channel 2)
Quality=15/94 Signal level=-81 dBm Noise level=-88 dBm
Encryption keyn
Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 6 Mb/s
9 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s; 36 Mb/s
48 Mb/s; 54 Mb/s
Extra:bcn_int=100
IE: IEEE 802.11i/WPA2 Version 1
Group Cipher : TKIP
Pairwise Ciphers (2) : CCMP TKIP
Authentication Suites (1) : PSK
Extra:mtik_ie=really long number

In summary, these two commands (iwconfig & iwlist) are interesting,
as they provide information about signal strengths of nearby
access points, none seem to tell me which PCs are attached to the
home broadband router, nor what destination IP addresses those
devices are going to.

Nice commands otherwise!