print

Course Outline

WP-202 Advanced WLAN Assessment and Analysis ("Packets Never Lie")

Duration
Public Class Duration: 3 Days (prerequisite of WP-200 STRONGLY recommended)
Web-Delivered Class Duration: 4 half days (9:30 AM PT - 12:00 PM PT M-TH)

Prerequisite: WP-200 strongly recommended

Overview and Method
This course dives deeper into wireless protocol analysis, particularly a more thorough understanding of wireless management, security, TCP/IP and related protocol variants, both benevolent and nefarious. It builds on the troubleshooting concepts in WP-200 to include long-term statistics gathering, monitoring, and general wireless network health. In-class activities are more advanced, often combining concepts in more complex scenarios for students to decipher. Successful graduates from this class will be ready to immediately apply skills in real-world environments.

1. Wireless LAN Packets
   1. Frames in the Wireless World
   2. Management Frames
   3. Coordination Functions
   4. Roaming
2. 802.11e – Wireless QOS
   1. 802.11e – WQOS
   2. HCF
   3. WMM
   4. Additional Features of 802.11e
3. Retransmissions and Fragmentation
   1. Retransmissions
   2. Fragmentation
   3. Physical Layers
   4. Uses for OmniSpectrum
4. Rogue Identification
   1. Using the Name Table
   2. Difficulties
   3. Signal Strength
   4. Identifying Rogues in Omnipeek
5. WLAN Security
   1. Protocol Analysis and Security
   2. WPA-PSK Exchange
   3. Things to do, with the Peek products
6. Back End Communications and Cross Segment Analysis
   1. CAPWAP
   2. IAPP
   3. LWAPP
   4. Cross Segment Analysis
7. Upper Layer Protocols ARP and DHCP
   1. The Expected Behavior of ARP
   2. DHCP In The Capture Window
   3. The Expected Behavior Of DHCP
   4. Common DHCP Processes
   5. DHCP Lease Rebinding (Rejected)
   6. Troubleshooting DHCP
8. DNS and SNMP
   1. DNS Organization
   2. DNS Resource Records
   3. SNMP Terminology
   4. Typical SNMP Behavior
   5. SNMP Security
   6. SNMP Troubleshooting Techniques
9. Packet Biathlon – OmniPeek*
   1. This intensive hands-on lab will allow students to use the OmniPeek platform focusing on analysis situations. The course is comprised of a series of in-depth, instructor lead scenarios and trace files that effect an enterprise operation.