Posts

Showing posts with the label Wireshark capture

Association Failures with Legacy Printers due to Management Frame Protection- A Technical Analysis

Image
 Let's understand first, what is Management Frame Protection? Based on the IEEE 802.11w amendment, Protected Management Frames (PMF), also known as Management Frame Protection (MFP), is a security feature that provides integrity protection for both unicast and broadcast management frames, while also encrypting unicast management frames in the same way as data to provide confidentiality. Without the Protected Management Frames feature, all management frames are sent unprotected in the open. Transmitting open frames makes connections vulnerable to attack. To leverage Protected Management Frames, both the AP and the STA need to be capable of using it, and it must be activated for each encrypted Wi-Fi network of the AP. If those conditions are met, Protected Management Frames are automatically invoked during client association. Understanding Management Frame Protection Failures MFP is one of the common challenge when working with legacy devices in modern wireless networks. My recent t...

802.11 Roaming- Understanding How Wireless Devices Transition Between Access Points

Image
We have heard about roaming several times, and understand how seamless roaming experience is important for users with time sensitive applications. This seamless experience is made possible by a process called "roaming" in 802.11 wireless networks.  What is 802.11 Roaming and how does it work? The 802.11 roaming refers to the process where a wireless station moves from one access point (AP) to another within the same extended service set (ESS). This transition should ideally happen without any interruption to the network connectivity. When the station first connect to a Wi-Fi network, it associates with an access point. As you move away from this initial access point, the signal strength degrades. When this happens, your device starts scanning for a better connection, looking for another access point to associate with. A very important fact, which is often forgotten by the Users/Network administrators is, the decision to roam is made entirely by your device, not the Access Poi...

Understanding the Fundamentals of WiFi Probe Request and Response Management Frames: WLAN Discovery methods

Image
For the Wireless devices to efficiently discover and connect to available networks, there are two fundamental management frames that plays and important roles; Probe Request and Probe Response frames. Let's explore how these management frames work together to help your devices find and connect to wireless networks. What is Probe Request? Probe Requests are management frames sent by a Wireless Client device or a Station (STA) when searching for wireless networks. Think of them as your device calling out "Hello, is anyone there?" This frame serves two main purposes: Finding a specific network, you have connected in the past. Discovering all available networks in coverage area of the device. Types of Probe Requests The types of Probe Request is dictated by the length of the SSID field in the Probe Request. There are two types of Probe Requests:  Directed Probe Request Broadcast Probe Request    Directed Probe Requests: When your device is looking for a specific network, it ...