ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 36 - CWAP-404 discussion

Report
Export

You are troubleshooting a client that is experiencing slow WLAN performance. As part of the troubleshooting activity, you start a packet capture on your laptop close to the client device. While analyzing the packets, you suspect that you have not captured all packets transmitted by the client. By analyzing the trace file, how can you confirm if you have missing packets?

A.
The missing packets will be shown as CRC errored packets
Answers
A.
The missing packets will be shown as CRC errored packets
B.
Protocol Analyzers show the number of missing packets in their statistics view
Answers
B.
Protocol Analyzers show the number of missing packets in their statistics view
C.
Look for gaps in the sequence number in MAC headers.
Answers
C.
Look for gaps in the sequence number in MAC headers.
D.
Retransmission are an indication of missing packets
Answers
D.
Retransmission are an indication of missing packets
Suggested answer: C

Explanation:

One way to confirm if you have missing packets in your packet capture is to look for gaps in the sequence number in MAC headers. The sequence number is a 12-bit field in the MAC header that is used to identify and order data frames within a traffic stream. The sequence number is incremented by one for each new data frame transmitted by a STA, except for retransmissions, fragments, and control frames. The sequence number can range from 0 to 4095, and then wraps around to 0. If you see a jump or a gap in the sequence number between two consecutive data frames from the same STA, it means that you have missed some packets in between. The other options are not correct, as they do not confirm if you have missing packets in your packet capture. CRC errored packets are packets that have been corrupted during transmission and have failed the error detection check. Protocol analyzers may show the number of CRC errored packets in their statistics view, but not the number of missing packets. Retransmissions are an indication of packet loss or collision, but not necessarily of missing packets in your capture.Reference:[Wireless Analysis Professional Study Guide CWAP-404], Chapter 5: 802.11 MAC Sublayer, page 114-115

asked 16/09/2024
Styliani Simoiridou
43 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first