2 Flashcards
What is a packet sniffer?
A packet sniffer, also known as a packet analyzer, is a software program or hardware device used to intercept traffic on a computer network.
What does IEEE 802.11 define?
IEEE 802.11 defines communication standards for wireless local area networks, commonly known as Wi-Fi.
What are the three types of 802.11 frames?
Management frames, control frames, and data frames.
What information do management frames provide from a forensics perspective?
Management frames are responsible for managing communication on a wireless LAN. Management frames provide valuable unencrypted data, revealing which stations are communicating and with whom.
Association Request/Response
Reassociation Request/Response
Probe Request/Response
Beacon
What is the purpose of control frames in 802.11 networks?
Control frames manage flow control over the medium (radio frequency) and avoid collisions using CSMACA algorithm.
Request to send (RTS)
Clear to Send (CTS)
Acknowledgement (ACK)
What is the significance of BSSID in wireless networks?
BSSID, or Basic Service Set Identifier, specifies a specific wireless access point’s MAC address, ensuring unique identification for station-to-station communications.
What are data frames in the context of wireless networks?
Data frames in wireless networks are responsible for sending data across the network. They encapsulate Layer 3 data and are used for communication between stations.
QoS Data
Null Data / QoS Null Data
What is a MAC address in the context of wireless networks?
A MAC address, or Media Access Control address, is a unique 6-byte numerical identifier assigned to every network interface. It is essential for identifying devices on a network.
What is an SSID in the context of wireless networks?
An SSID, or Service Set Identifier, is a text-based identifier for a wireless network. It can be publicly visible or hidden (cloaked), and it helps devices connect to the correct network.
What is a BSSID in the context of wireless networks?
A BSSID, or Basic Service Set Identifier, is a unique 6-byte number that specifies the MAC address of a specific wireless access point. Each access point must have a unique BSSID for station-to-station communications.
