interference and accommodate good wireless coverage using multiple BSSs.

A BSS is formed by wireless clients “associating” themselves with a particular access point. Naturally, a wireless client will have to “discover” whether there is an access point within range and its corresponding channel. For this purpose, access points advertise themselves with “beacon” frames and wireless clients can (passively) listen for these frames. Another discovery approach is for the wireless client to send out “probe” requests to see if certain access points are within range. Following the discovery process, wireless clients will send requests to be associated with a particular BSS.

Types of Frames

The 802.11 link layer is much more complicated than the Ethernet one. The main reason is that wireless links have lower reliability compared to the reliability of wired links, and therefore the 802.11 link layer has features to reduce the effects of frame loss. For example, every data frame is acknowledged with an ACK frame. Moreover, the protocol needs to support access point discovery, association and disassociation, authentication, wired/wireless bridging, and many other features that are not necessarily needed in a wired link layer.

When capturing on a wireless channel, you will see three main kinds of frames:

Data frames

Control frames

oAcknowledgement

oRequest to Send

oClear to Send

Management frames

oBeacons

oProbe Requests / Probe Responses

oAssociation Requests / Association Responses

oReassociation Requests / Reassociation Responses

oDisassociations

oAuthentications / Deauthentications

Additionally, frame headers may contain Quality of Service (QoS) and

High Throughput (+HTC) information.

6

AirPcap User’s Guide

Page 8
Image 8
Cace Technologies AirPcap Wireless Capture Adapters manual Types of Frames

AirPcap Wireless Capture Adapters specifications

Cace Technologies AirPcap Wireless Capture Adapters are essential tools for network professionals aiming to monitor, analyze, and troubleshoot wireless networks. These innovative devices enable packet capture and analysis over 802.11 wireless networks, providing insights that are crucial for maintaining network integrity and performance.

One of the main features of AirPcap adapters is their ability to capture raw 802.11 packets in real time, including management, control, and data frames. This capability allows for a comprehensive view of wireless communications, assisting engineers in identifying issues like signal interference, unauthorized access points, and potential security breaches.

Another significant characteristic is the support for both 802.11a/b/g/n standards. This wide-ranging compatibility ensures that users can effectively analyze traffic across various network types, regardless of the generation of equipment being utilized. Additionally, AirPcap adapters are equipped with advanced features like packet injection, which is beneficial for testing network robustness and security defenses.

The wireless capture adapters are often praised for their seamless integration with popular analysis tools such as Wireshark. This combination provides users with a powerful interface for performing in-depth packet analysis, enabling the decoding of complex protocols and offering visualizations that aid in understanding network behaviors.

For ease of use, AirPcap adapters come equipped with a compact design and user-friendly software. They can be connected to laptops or portable devices, making them ideal for field use. Their portability ensures that field technicians or network analysts can perform assessments in various environments without the need for extensive setup or configurations.

Security is another critical aspect where AirPcap shines. These adapters allow for the capture of encrypted packets, provided the user has the appropriate decryption keys. This feature is particularly valuable for troubleshooting security protocols and ensuring that data transmitted over the network is secure.

In conclusion, Cace Technologies AirPcap Wireless Capture Adapters are versatile and powerful tools for any network engineer or security professional. With their ability to capture and analyze a wide range of wireless traffic, their compatibility with industry-standard tools, and their advanced features, AirPcap adapters are indispensable in today's increasingly wireless world. Whether used for routine monitoring, troubleshooting, or security assessments, these adapters offer a robust solution for wireless network management.