Time functions - use static counter for deterministic testing

Random - use stdlib for tests

Check if an achievement is unlocked

Print with prefix

Unlock an achievement

Helper: pick random phrase avoiding last 3 used

Check if character is printable ASCII (32-126)

Calculate level from total XP Returns level 1-40

Haversine formula for GPS distance calculation Returns distance in meters between two lat/lon points

Parse capability info from raw 802.11 beacon frame

Convert WiFiFeatures to feature vector (pure function, no normalization) Mirrors src/ml/features.cpp toFeatureVector but without normParams

Calculate anomaly score component for signal strength Very strong signals (>-30 dBm) are suspicious

Calculate anomaly score component for beacon interval Normal is ~100ms (100 TU), unusual intervals are suspicious

Parse beacon interval from raw 802.11 beacon frame Returns default 100 if frame is too short

Escape a string for CSV output (handles quoting and control char stripping) Always wraps in quotes for SSID fields (as per RFC 4180 for fields with sp

Escape a string for XML output Returns the number of characters written to output (not including null terminator) If output is nullptr, just returns t

Check if MAC address is randomized (locally administered bit set) The second bit of the first octet indicates locally administered

Calculate anomaly score for beacon jitter (high jitter = software AP)

Build a deauth frame in provided buffer (must be >= 26 bytes) Returns frame size (always 26)

Calculate anomaly score for open network

Calculate anomaly score for WPS on open network (honeypot pattern)

Escape a single character for XML output Returns pointer to static string with escaped version, or nullptr if no escaping needed

Check if a character needs XML escaping

Calculate anomaly score for missing vendor IEs (real routers have many)

==[ HELPER: Initialize packet header ]==

Check if a character is a control character that should be stripped from CSV

Calculate anomaly score for VHT without HT (inconsistent capabilities)

Calculate vulnerability score based on security features From inference.cpp vuln scoring logic

Get XP required for a specific level Returns 0 for invalid levels

Check if channel is a non-overlapping channel in US/EU (1, 6, 11)

Check if SSID contains only printable characters Returns true if all characters are printable, false otherwise

Check if a string needs CSV quoting (contains comma, quote, newline, or CR)

Parse MAC address from colon-separated hex string Returns true if parsing succeeded, false otherwise

Calculate progress percentage to next level (0-100)

Initialize PCAP global header with standard values

Convert RSSI to signal quality percentage (0-100) Uses typical range of -90 dBm (weak) to -30 dBm (strong)

Calculate deauth target score based on network characteristics From inference.cpp deauth scoring logic

Calculate center frequency for 2.4GHz channel in MHz Channel 1 = 2412 MHz, each channel +5 MHz (except ch14 = 2484)

Clamp a value to [0, 1] range

Calculate channel from frequency

Check if MAC is multicast (group bit set) The first bit of the first octet indicates multicast

Lightweight heap logger for diagnostics

Convert 6-byte MAC address to 64-bit key for map/set storage Uses big-endian packing: mac[0] in highest byte position

Calculate evil twin score based on network characteristics From inference.cpp evil twin detection

Find index of maximum value in array Returns 0 if array is empty

Format MAC address as colon-separated hex string Output buffer must be at least 18 bytes (17 chars + null) Returns number of characters written (not i

Normalize an array of scores so they sum to 1.0 Returns false if all scores are zero (no normalization possible)

Normalize a value using z-score normalization Returns 0 if std is too small to avoid division by zero

Helper: Open SD file with retry logic