@Infoseepage @campuscodi I guess that the "sniffers" did not "just listen to packets" but sent pings or equivalent probing signals to find networks. Thus easy to identify. On a lower-level, as far as I know even "only listening to radio signals" can be detected with accurate enough equipment, since radio receivers have a local oscillator for demodulation, and the oscillation "bleeds" through the receiving antenna and emits a small though detectable signal.