Study

Since these blogposts are preparing for my CWAP, there will be no blogpost about WPA-personal. This blog is how to identify WPA2-personal in the frames, during which I’ll point out the differences between WPA/WPA2 and Personal/Enterprise. There will be a separate blogpost about WPA2-Enterprise in detail as well. Below there is a beacon frame, a …

During my blog “MAC Headers,” I already discussed the Data frames. In this small blog, I want to talk about the 4 most common data frame types. The first is the “normal” Data Frame. This is the data frame without the QoS field in the header. You can filter in wireshark with wlan.fc.type_subtype == 0x0 …

Frames that are part of the control frames are RTS and CTS. Those two frames are used for avoiding collisions during transmitting. The client needs to be enabled for RTS/CTS. The RTS frame is sent by the client to request to send data. The CTS tells the client that the client is clear to send …

Authentication/Deauthentication Frames To enter the authentication state (remember the different states a client can be assigned to) you need authentication frames. There are four frames during the authentication. First the client transmits an authentication frame and the access point replies with an acknowledgement and an authentication (response) frame. The client replies with an acknowledgement. The …

Management frames are the frames that are used for managing the wireless LAN. In this blog, I want to write out which frames there are and what their purposes are. Beacon Frames Beacon frames have the information about the wireless network and are sent by the access point. Every 100 Time Unit is a beacon …

In the MAC header, there is also a field that is called the QoS control field, and it has different flags. It is in total a 2-byte field (16 bits). Those 16 bits are written down as followed. The first 4 bits is the Traffic Identifier. This identifies the User Priority. The User Priority is …