122
edits
WiFi module: Difference between revisions
Jump to navigation
Jump to search
no edit summary
No edit summary |
No edit summary |
||
| Line 1: | Line 1: | ||
This module analyses IEEE 802.11 frames either acquired using the WiFi monitoring feature (see | This module analyses IEEE 802.11 frames either acquired using the WiFi monitoring feature (see [[WiFi|WiFi interface settings]]) or encapsulated in special packets (https://www.wireshark.org/docs/dfref/p/peekremote.html). It also provides statistics when analyzing PCAPs with a Radiotap link type and IEEE 802.11 packets. | ||
=== Statistics === | === Statistics === | ||
| Line 62: | Line 62: | ||
There are currently four kinds of 802.11 traffic that can be analyzed: | There are currently four kinds of 802.11 traffic that can be analyzed: | ||
# Live packet processing of IEEE 802.11 packets acquired with the WiFi monitoring feature (see | # Live packet processing of IEEE 802.11 packets acquired with the WiFi monitoring feature (see [[WiFi|WiFi interface settings]]). | ||
# Radiotap PCAP files that contain IEEE 802.11 packets. | # Radiotap PCAP files that contain IEEE 802.11 packets. | ||
# PEEKREMOTE packets. This kind of traffic is generated by access points and is send via UDP to a specified IP address and port. To analyze this traffic, the endpoint mode has to be enabled on an interface which receives this traffic. In the [[Global settings#Endpoint mode|endpoint mode configuration]], an IP address and port can be configured for which the Allegro Network Multimeter accepts packets. PEEKREMOTE packets usually do not contain complete IP packets, only 802.11 statistics that are evaluated by the Allegro Network Multimeter. | # PEEKREMOTE packets. This kind of traffic is generated by access points and is send via UDP to a specified IP address and port. To analyze this traffic, the endpoint mode has to be enabled on an interface which receives this traffic. In the [[Global settings#Endpoint mode|endpoint mode configuration]], an IP address and port can be configured for which the Allegro Network Multimeter accepts packets. PEEKREMOTE packets usually do not contain complete IP packets, only 802.11 statistics that are evaluated by the Allegro Network Multimeter. | ||
# CAPWAP encapsulated packets. In contrast to PEEKREMOTE, CAPWAP packets encapsulate complete IP packets which itself contain 802.11 information. Therefore, the endpoint mode must be configured for a specific IP and port and the [[Global settings#Tunnel view mode|tunnel view mode]] must be enabled too to let the Allegro Network Multimeter look inside the encapsulated packets. | # CAPWAP encapsulated packets. In contrast to PEEKREMOTE, CAPWAP packets encapsulate complete IP packets which itself contain 802.11 information. Therefore, the endpoint mode must be configured for a specific IP and port and the [[Global settings#Tunnel view mode|tunnel view mode]] must be enabled too to let the Allegro Network Multimeter look inside the encapsulated packets. | ||