This is because differences exist between operating system platforms which may prevent the ability to capture all wireless frames over the air. The selection of a supported wireless adapter model for use with Wireshark can be tricky. It is worth your time to read (even almost 4 years later. So remember, never use channel scanning for protocol analysis!ĭevin Akin originally covered multi-adapter Wi-Fi captures in his CWNP whitepaper titled The Triple Blendy. If you are scanning 3 channels, then you can only capture 1/3rd of the frames (actually less due to hop time between channels). Remember, scanning ALWAYS results in missing frames. And if the scanning duration is set to a large a value then there is a good chance the adapter will be on the wrong channel when the roam occurs, as well as the inability to calculate roam times between data packets on the "old" and "new" AP as discussed in part 3 of this series. If the scanning duration (also called dwell time) is set to a small value then the adapter will likely miss frames related to the roaming and authentication exchange because it hops away to a different channel before the roam completes. Scanning between channels with a single adapter is not sufficient because the adapter will miss frames transmitted on alternate channels. Be sure to check the supported adapters list for the protocol analyzer software that you intend on using to capture and analyze the traffic. I have had good success with the Rosewill RHB-330 USB hub. In order to perform wireless roaming analysis, you will need multiple wireless adapters to capture frames simultaneously on different channels. The hardware required typically includes 3 wireless adapters and a USB hub.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |