How to Audit Wi-Fi Performance and Capture Diagnostic Logs Using wdutil in macOS Terminal

Troubleshooting enterprise wireless connectivity issues on Apple Silicon and Intel Mac computers often requires visibility far beyond standard menu-bar status indicators. While clicking the Wi-Fi menubar icon while holding the Option key reveals fundamental metrics such as RSSI, noise floors, and current Tx rates, it provides neither real-time event streaming nor historical telemetry regarding roaming decisions and authentication failures. Built directly into macOS is wdutil (Wireless Diagnostics Utility), a potent command-line interface to Apple’s CoreWLAN and wireless daemon subsystems. By mastering wdutil within macOS Terminal, network administrators and advanced users can audit real-time radio performance, capture full-stack diagnostic bundles, monitor roaming handoffs, and identify RF interference without third-party packet sniffing utilities.

Understanding wdutil and the CoreWLAN Subsystem

Located in /usr/bin/wdutil, this native binary interfaces directly with the background daemons managing Apple’s wireless network stack—primarily airportd and CoreWLAN. Unlike deprecated commands such as the airport CLI utility (which was phased out in recent macOS versions), wdutil is fully maintained and optimised for modern Apple Silicon architectures, Wi-Fi 6, Wi-Fi 6E (6 GHz), and Wi-Fi 7 standards.

The utility serves three primary operational functions: outputting comprehensive instantaneous status dumps of active radio hardware, logging real-time wireless transitions (including BSSID handoffs and DHCP acknowledgments), and collecting diagnostic trace archives suitable for deep engineering analysis.

Generating an Instantaneous Wi-Fi Status Dump

To view detailed diagnostic telemetry regarding your active Wi-Fi connection, execute the info command in Terminal:

wdutil info

This command queries the wireless interface (typically en0 on MacBooks) and outputs an exhaustive summary containing critical RF parameters:

• SSID and BSSID: Displays the service set identifier along with the hardware MAC address of the specific Access Point (AP) radio your Mac is currently associated with.
• Channel and Band: Identifies the operating channel number, channel width (e.g. 20 MHz, 40 MHz, 80 MHz, or 160 MHz), and frequency band (2.4 GHz, 5 GHz, or 6 GHz).
• RSSI (Received Signal Strength Indicator): Measured in dBm (decibel-milliwatts). Values between -30 dBm and -60 dBm indicate optimal signal strength, while values below -75 dBm indicate significant signal degradation.
• Noise Floor: Indicates ambient electromagnetic interference. A healthy RF environment typically exhibits noise figures between -90 dBm and -100 dBm. The Signal-to-Noise Ratio (SNR) can be calculated by subtracting the noise from the RSSI (e.g. -50 dBm – (-92 dBm) = 42 dB SNR, which represents an exceptional signal).
• Tx Rate and PHY Mode: Shows the active transmission bit rate alongside the physical layer protocol (e.g. 802.11ax for Wi-Fi 6, 802.11be for Wi-Fi 7).
• Security Suite: Identifies the authentication protocol in use, such as WPA2-Personal, WPA3-Personal (SAE), or WPA3-Enterprise with 802.1X EAP.

Streaming Real-Time Wireless Events and Roaming Transitions

In high-density office buildings or campus networks with multiple overlapping access points, a Mac frequently switches between AP radios as users move between rooms. When roaming algorithms malfunction or AP signal thresholds are misconfigured, users experience packet loss, dropped VoIP calls, and unexpected disconnections. The wdutil log command streams these low-level transitions directly to your terminal window.

1. Launch Terminal from /Applications/Utilities/.
2. To stream live Wi-Fi events continuously, execute:

   sudo wdutil log

3. Authenticate with your macOS administrator password when prompted.
4. Walk across your workspace or initiate network traffic. Terminal displays live timestamped events detailing:
   • Candidate access point probe requests and beacon frame receptions.
   • Threshold-triggered roaming decisions (e.g. your Mac evaluating an AP with -62 dBm RSSI against its current association at -78 dBm).
   • 4-way handshake re-authentication cycles and Fast BSS Transitions (802.11r).
   • Channel quality assessments and dynamic frequency selection (DFS) radar events.
5. Press Ctrl + C to terminate the streaming session.

Capturing Comprehensive Wireless Diagnostic Bundles

When submitting network incident tickets or escalating stubborn connectivity defects to IT engineering, capturing a unified diagnostic bundle is invaluable. The diagnose verb automates this process entirely.

1. In Terminal, run the diagnostic capture command:

   sudo wdutil diagnose

2. The utility immediately triggers Apple’s system-level diagnostic routines. Over the course of 60 to 120 seconds, it compiles:
   • System system profiler hardware manifests.
   • CoreWLAN and airportd crash logs and historical fault traces.
   • Active IP routing tables, ARP caches, and DNS resolver configurations.
   • Radio frequency spectrum scans and visible BSSID survey tables.
   • Historical power management and system sleep/wake wireless logs.
3. Upon completion, wdutil outputs the exact file path of the resulting archive (e.g. /var/tmp/WirelessDiagnostics_<timestamp>.tar.gz).
4. To open the directory containing the generated diagnostic archive in Finder, run:

   open /var/tmp

Auditing and Testing Wi-Fi Interfaces via Scripting Pipelines

Because wdutil prints clean, predictable output, it integrates seamlessly into automated Bash or Zsh health-check scripts deployed across fleet management tools like Jamf Pro, Kandji, or Microsoft Intune.

For instance, to extract only your current RSSI value for continuous logging or monitoring, use this concise pipeline:

wdutil info | awk -F': ' '/RSSI/ {print $2}'

Similarly, to extract the current channel width and BSSID in a single command:

wdutil info | grep -E "BSSID|Channel|Tx Rate"

Incorporating these command-line audits into regular administrative workflows ensures rapid fault isolation, robust RF optimisation, and seamless client roaming across modern macOS enterprise environments.