AiroPeek SE™ AiroPeek NX™ Version 2.0.5 Technical Specifications

Supported Wireless Standards AiroPeek Version 2.0.5 Supported Standards AiroPeek analyzes traffic on networks Standard Spectrum Spreading RF Band Data Rates conforming to three of the more recent 802.11a Orthogonal Frequency 5 GHz 6, 9, 12, 18, 24, 36, 48, and 54 Mbps revisions of the IEEE 802.11 WLAN standard: Division Multiplexing (OFDM) 802.11a, 802.11b, and 802.11g. 802.11a uses Orthogonal Frequency Division Multiplexing 802.11b Direct Sequence Spread 2.4 GHz 1, 2, 5.5, and 11 Mbps (OFDM) technology in the 5.0 GHz band to Spectrum (DSSS) achieve data rates of 6, 9, 12, 18, 24, 36, 48, 802.11g DSSS 2.4 GHz 1, 2, 5.5, and 11 Mbps and 54 Mbps. 802.11b uses Direct Sequence OFDM 2.4 GHz 6, 9, 12, 18, 24, 36, 48, and 54 Mbps Spread Spectrum (DSSS) technology in the 2.4 GHz band to achieve data rates of 1, 2, 5.5, and AiroPeek supports the decryption of WEP AiroPeek supports the decoding and 11 Mbps. 802.11g is somewhat of a hybrid traffic at various key lengths. Additionally, troubleshooting of all of the unencrypted of the two previous standards as it uses by allowing the user to input a network’s traffic associated with WPA, including Orthogonal Frequency Division Multiplexing WEP key, AiroPeek can decrypt “on-the-fly” the important set-up and key exchange. (OFDM) technology in the 2.4 GHz band to using multiple named key sets. Using a AiroPeek is therefore able to provide achieve data rates of 6, 9, 12, 18, 24, 36, 48, and convenient command line utility, AiroPeek valuable troubleshooting capabilities to the 54 Mbps at the same time that it is backward can also decode whole packet files that were configuration and setup of WPA. compatible with 802.11b DSSS networks and captured in an encrypted state. As WPA maintains a secure and ever changing encryption scheme, decryption is data rates. Although 802.11g also optionally Support for WPA supports Texas Instruments’ Packet Binary not possible and therefore not supported. WPA (Wi-Fi Protected Access) is an Convolutional Code (PBCC) coding scheme, encryption and authentication technique Supported Operating Systems AiroPeek does not currently support any cards that improves the security protection Windows XP (SP1) or Windows 2000 (SP3) with this feature. The original specification available to wireless networks as compared and Internet Explorer 6.0 (SP1) for 802.11 included another technology, to the more vulnerable WEP. Wi-Fi Protected Frequency-Hopping Spread Spectrum (FHSS) Minimum System Requirements Access is derived from and will be forward which is not widely implemented and is not compatible with the upcoming IEEE 802.11i AiroPeek NX supports portable computers supported in AiroPeek. standard. To improve data encryption, Wi-Fi as long as the basic system requirements to Note: 802.11a WLAN cards based on the Protected Access utilizes its Temporal Key run the supported operating systems are Atheros chipset may support a proprietary Integrity Protocol (TKIP). TKIP provides met. Depending on traffic and the particular mode called Turbo Mode (specific card important data encryption enhancements usage of AiroPeek NX, the requirements may vendors may use other names). Turbo including a per-packet key mixing be substantially higher. Mode doubles the standard data rates and function, a message integrity check (MIC) Recommended System uses twice the RF spectrum specified for named Michael, an extended initialization P4 1.7 GHz; 512 MB RAM; 10 GB Available HD a normal channel in the 802.11a WLAN vector (EIV) with sequencing rules, and Space standard. For more information, please a re-keying mechanism. To strengthen visit the support pages of our website, at: user authentication, Wi-Fi Protected Heavier Usage Recommendations www.wildpackets.com/support. Access implements the 802.1x Extensible Factors that contribute towards superior Authentication Protocol (EAP). Together, Support for WEP performance include, high speed CPU, these implementations provide a framework dual CPUs, two or more GB of RAM, high WEP (Wired Equivalent Privacy) is a data for strong user authentication. This performance disk storage subsystem (RAID encryption technique supported as an framework utilizes a central authentication 0), and as much additional hard disk space option in the 802.11 WLAN protocols. The server, such as RADIUS, to authenticate each as is required to save the trace files that you technique uses shared keys and a pseudo user on the network before they join it, and plan to manage. random number (PRN) as an initial vector also employs “mutual authentication” so that (IV) to encrypt the data portion of network the wireless user doesn’t accidentally join a packets. The 802.11 WLAN network headers rogue network that might steal its network themselves are not encrypted. credentials. Distributed Analysis AiroPeek supports the following 802.11b 802.11a Channels with RFGrabber™ wireless adapters: The 802.11a WLAN standard uses OFDM • 2Wire Wireless PC Card AiroPeek’s wireless analysis can be in the 5.0 GHz band. The standard defines • 3Com 3CRWE737 AirConnect Wireless LAN PC Card distributed throughout an Enterprise or to • Avaya Wireless PC Card channels 1-199, starting at 5.005 GHz, with a geographically remote location with the • Agere/Lucent ORiNOCO Wireless LAN PC Card their center frequencies spaced 5 MHz apart. use of RFGrabber, WildPacket’s distributed • Agere/Lucent ORiNOCO Wireless LAN Mini PCI The FCC in the United States has allocated WLAN analysis probe. For more information • Buffalo WLI-PCM-L11/GP Wireless LAN Adapter bandwidth in three parts of the spectrum, • Buffalo WLI-PCM-L11G Wireless LAN Adapter about distributed wireless analysis, please low band (5150 MHz to 5250 MHz), medium • Cisco Systems 340 or 350 Series Wireless LAN PC visit http://www.wildpackets.com/products/ Card (WildPackets resells this card, for more informa- band (5250 MHz to 5350 MHz), and high rfgrabber. tion please contact our sales department via email at band (for outdoor use - 5725 MHz to 5825 [email protected] or phone at (925)937-3211.) MHz). The ETSI and ERM in Europe, MKK in Hardware Support • Cisco Systems MPI350 Wireless Mini PCI Card • Compaq WL110 PC Card Japan, and other regulatory agencies in Wireless adapter support is augmented on a • Dell TrueMobile 1150 Series Mini PCI Card other jurisdictions have made their own regular basis. Check www.wildpackets.com/ • Dell TrueMobile 1150 Series PC Card allocations within this band. support for recent additions and more • D-Link Air DWL-660 Wireless PC Card detailed information. • ELSA AirLancer MC-11 Note: AiroPeek, in conjunction with cards • ELSA Vianect WLAN MC-11 based on the Atheros AR5000 or AR5001 AiroPeek supports the following mul- • Ericsson DSSS Wireless LAN PC Card chipsets, will support only channels 36-64 • Fujitsu connect2Air WLAN E-1100 PC-Card timode IEEE 802.11a, 802.11b, and and 149-161. 802.11g adapters: • I-Gate 11M PC Card • Intel(R) PRO/Wireless 2011 LAN PC Card • Cisco Aironet 802.11a/b/g Wireless Adapter 802.11b Channels • Joynet WLAN PC Card • Linksys WPC55AG 1.0 802.11a/b/g • LANCOM Systems AirLancer MC-11 The 802.11b WLAN standard uses DSSS in • Linksys WPC55AG v1.1 802.11a/b/g • NCR WaveLAN/IEEE PC Card the 2.4 GHz band. Taking 2412 MHz as the • NetGear WAB501 Dual Band Wireless Adapter • NEC Corporation Wireless PC Card • NetGear WAG511 v1 802.11a/b/g center frequency of the first channel, the • Nortel Networks e-mobility 802.11 Wireless LAN PC Card • NetGear WAG511 v2 802.11a/b/g standard described 14 channels, 5 MHz • Onair PC Card (INT) • ORiNOCO 8480 Gold 802.11a/b/g ComboCard • Onair PC Card (EMB) apart, numbered 1 to 14. In the United States, • ORiNOCO 8481 Silver 802.11a/b/g ComboCard • RoamAbout 802.11 DS (Enterasys) the FCC allocated bandwidth to support the AiroPeek supports the following • Samsung SEW-2001p Card first 11 channels. Regulatory bodies in other multimode IEEE 802.11a and 802.11g • Samsung SEW-2001m Card jurisdictions made different allocations from adapters: • Skyward PC Card within this same band. • D-Link AirXpert DWL-AG650 Wireless Cardbus Adapter • Sony PCWA-C100 Wireless PC Card • Linksys WPC55AG Dual-Band Wireless A+G Notebook • Sony PCWA-C150 Wireless PC Card Note: Adapters purchased in North America Adapter • SPEED TOUCH PC Card operate and capture on channels 1- 11. If you • Symbol Spectrum24 11 Mbps DS Wireless LAN PC Card • SMC EZ Connect Universal 2.4GHz/5GHz Wireless Card- are using AiroPeek outside of North America bus Adapter SMC2336W-AG • Toshiba Wireless LAN Mini PCI Card • SMC EZ Connect 2.4GHz/5GHz Universal Wireless Card- • Toshiba Wireless LAN PC Card and need to analyze traffic on channels 12- bus Adapter (SMC2335W) • WARPSTAR WL11C (PC-WL/1C) 14 in addition to 1-11, you must purchase a • SMC EZ Connect Universal 2.4GHz/5GHz Wireless Card- • Westell 802.11b PC Card WildPackets-supported card which operates bus Adapter (SMC2336W-AG) • Xircom Wireless Ethernet Adapter on the correct channels for your location. AiroPeek supports the following AiroPeek supports the following 802.11g multimode IEEE 802.11a and 802.11b wireless adapters: 802.11g Channels adapters: • D-Link AirPlus Xtreme G DWL-G650 Adapter 802.11g functions on the same channels in (rev A1 not supported) • D-Link AirPro DWL-AB650 Multimode Wireless Cardbus the same frequency band as 801.11b with Adapter • D-Link AirPlus Xtreme G DWL-G520 Adapter • Linksys Dual Band Wireless A+B Notebook CardBus Adapter • Proxim Gold ORiNOCO 802.11b/g ComboCard Model the exception that at the higher data rates, • Linksys Dual Band Wireless A+B Notebook MiniPCI Adapter 8470-WD it will use OFDM modulation. 802.11g also • NetGear WAB501 Dual Band Wireless Adapter Important: Because AiroPeek puts the card in functions optionally using PBCC, however • ORiNOCO 8460 Gold 802.11a/b ComboCard a “listen-only” mode, simultaneous network this is not supported by AiroPeek. • SMC EZ Connect 2.4Ghz/5Ghz Universal Wireless Card- services are not supported when running bus Adapter (2335W) Protocols • Proxim Gold ORiNOCO 802.11a/b ComboCard Model 8460 AiroPeek. You may receive “Network cable AiroPeek decodes over 1,000 protocols and AiroPeek supports the following 802.11a unplugged” or other messages - this is wireless adapters normal. After quitting the program, network sub-protocols. • Cisco Systems AIR-CB20A Wireless LAN PC Card services should be restored. If you are using A list of the higher level protocols can be • D-Link AirPro DWL-A650 Wireless Cardbus Adapter 3Com, Nortel, Symbol, or 802.11b Intel found at www.wildpackets.com/support/ • D-Link AirPro DWL-A650 rev.B Wireless Cardbus Adapter drivers, it may be necessary to switch to the • Intel(R) PRO/Wireless 5000 LAN Cardbus Adapter decodes/airopeek_nx • Intel(R) PRO/Wireless 5000 LAN 3A Mini PCI Adapter original vendor-supplied drivers for normal • LinkSys Instant Wireless PC Card (WPC54A) network operation. • NetGear HA501 Wireless Adapter • Proxim Harmony 802.11a Network Adapter (Model 8450) • Proxim Skyline 802.11a Network Adapter (Model 4030) 1340 Treat Blvd, Suite 500 • SMC EZ Connect 802.11a Wireless Cardbus Adapter Walnut Creek, CA 94597 (2735W) main (925)937-3200 • Sony 802.11a Wireless LAN Adapter (PCWA-C500) fax (925)937-3211

www.wildpackets.com APNX2.0.5, AP2.0.5 -20041013