The Control frames are used to improve the reliability characteristics of the link. The establishment of a BSS through the process of discovery and association is supported by the Management frames, including possible authentication steps in the process.

It is beyond the scope of this brief introduction to describe the details of these frames and their usage in the 802.11 protocol. If you are interested in additional details, you can consult the following websites:

http://standards.ieee.org/getieee802/802.11.html

http://www.wi-fiplanet.com/tutorials/article.php/1447501

http://technet2.microsoft.com/WindowsServer/en/library/370b019f-711f- 4d5a-8b1e-4289db0bcafd1033.mspx?mfr=true

Another good source is the book 802.11® Wireless Networks: The Definitive Guide (2nd Edition) by Matthew Gast (ISBN-10 0-596-10052- 3).

How AirPcap Adapters Operate

The AirPcap adapter captures the traffic on a single channel at a time; the channel setting for the AirPcap adapter can be changed using the AirPcap Control Panel, or from the “Advanced Wireless Settings” dialog in Wireshark. Depending on the capabilities of your AirPcap adapter, it can be set to any valid 802.11a/b/g/n channel for packet capture.

All of the AirPcap adapters can operate in a completely passive mode. This means that they can capture the traffic on a channel without associating with an access point, or interacting with any other wireless device. Unless you are transmitting with either AirPcapTx or AirPcap Ex, none of the adapters is detectable by any other wireless station.

The AirPcap adapters can work in, so called, Monitor Mode. In this mode, the AirPcap adapter will capture all of the frames that are transferred on a channel, not just frames that are addressed to it. This includes data frames, control frames and management frames.

When more than one BSS shares the same channel, the AirPcap adapter will capture the data, control and management frames from all of the BSSs that are sharing the channel and that are within range of the AirPcap adapter.

The AirPcap software can optionally be configured to decrypt WEP- encrypted frames. An arbitrary number of keys can be configured in the driver at the same time, so that the driver can decrypt the traffic of more than one access point at the same time. WPA and WPA2 support is handled by applications such as Wireshark and Aircrack-ng. See the

AirPcap User’s Guide

7

Page 8 Page 10
Page 9
Image 9
Cace Technologies AirPcap Wireless Capture Adapters manual How AirPcap Adapters Operate
Page 8 Page 10

AirPcap Wireless Capture Adapters specifications

Cace Technologies AirPcap Wireless Capture Adapters are essential tools for network professionals aiming to monitor, analyze, and troubleshoot wireless networks. These innovative devices enable packet capture and analysis over 802.11 wireless networks, providing insights that are crucial for maintaining network integrity and performance.

One of the main features of AirPcap adapters is their ability to capture raw 802.11 packets in real time, including management, control, and data frames. This capability allows for a comprehensive view of wireless communications, assisting engineers in identifying issues like signal interference, unauthorized access points, and potential security breaches.

Another significant characteristic is the support for both 802.11a/b/g/n standards. This wide-ranging compatibility ensures that users can effectively analyze traffic across various network types, regardless of the generation of equipment being utilized. Additionally, AirPcap adapters are equipped with advanced features like packet injection, which is beneficial for testing network robustness and security defenses.

The wireless capture adapters are often praised for their seamless integration with popular analysis tools such as Wireshark. This combination provides users with a powerful interface for performing in-depth packet analysis, enabling the decoding of complex protocols and offering visualizations that aid in understanding network behaviors.

For ease of use, AirPcap adapters come equipped with a compact design and user-friendly software. They can be connected to laptops or portable devices, making them ideal for field use. Their portability ensures that field technicians or network analysts can perform assessments in various environments without the need for extensive setup or configurations.

Security is another critical aspect where AirPcap shines. These adapters allow for the capture of encrypted packets, provided the user has the appropriate decryption keys. This feature is particularly valuable for troubleshooting security protocols and ensuring that data transmitted over the network is secure.

In conclusion, Cace Technologies AirPcap Wireless Capture Adapters are versatile and powerful tools for any network engineer or security professional. With their ability to capture and analyze a wide range of wireless traffic, their compatibility with industry-standard tools, and their advanced features, AirPcap adapters are indispensable in today's increasingly wireless world. Whether used for routine monitoring, troubleshooting, or security assessments, these adapters offer a robust solution for wireless network management.
Top Page Image Contents