Chapter 14 Wireless Network Security 159 Copyright Goodheart-Willcox Co., Inc. May not be reproduced or posted to a publicly accessible website. Name ________________________________________________________________ 15. Click the Packets tab. The packets sent during this capture are displayed. Click Protocol to sort the packets in order by protocol. Scroll down until you find packets with MNGT/BEACON. These are management packets that are sending beacons to advertise a wireless network. Scroll through the beacon packets. What is the most common destination MAC address to which the beacon packets are being sent? _ _________________________________________________________________________________________________________________ 16. Click one of the beacon packets. On the left side of the screen, review the information contained in this management packet. Create and save a screenshot showing where the beacon and SSID are identified. 17. Assume you want to investigate transmissions that originate or are received at a specific MAC address. Choose a packet from the list, right-click on it, and click Quick Filter By MAC Address From/To MAC address in the shortcut menu. Create and save a screenshot of the result. What is some specific information here that will be helpful in understanding the communication that occurred? _ __________________________________________________________________________________________________________________ __________________________________________________________________________________________________________________ __________________________________________________________________________________________________________________ _________________________________________________________________________________________________________________ 18. Wireless scanning can be performed to capture packets from a specific MAC address. Close CommView for WiFi, and the restart it. Restarting must be performed due to this version being the evaluation version. When it reopens, do not click the Play button to start scanning. 19. Click the Rules tab. 20. Check the Enable MAC address rules check box. 21. Expand the Simple Rules branch in the left-hand pane, and click MAC Address. 22. On the right-hand side of the tab, click the MAC Alias button. This button is located above the Add MAC Address button. 23. In the MAC Aliases dialog box, double-click the Investigate-me alias. The entire MAC address is entered in the record prompt on the right-hand side of the tab. 24. Click the Both radio button, and then click the Add MAC Address button. 25. Click the Nodes tab, and then click the Play button to begin the capture. When it finishes, click the Packets tab. You should only see packets that include the alias Investigate-me. Create and save a screenshot. 26. Click the Save button to save the data. Save the log as Wireless Investigation in the default folder. Click to select an alias Click to add the address Double-click the alias Goodheart-Willcox Publisher