
Chapter 7
authentication process. At this point, the 802.11i TKIP-based encryption of the wireless link
from the STA to the new AP starts. Beginning with frame 2577, the remaining sniffer trace in
Figure 7.11 shows all user frames as “WEP data” because the sniffer does not know how to
decrypt them. We can, however, see the end of the Application Resumption Delay with the
resumption of the application pings in frame 88 in Figure 7.8 since the encryption is only of
the wireless link, and when these frames emerge from the AP, they are transmitted in the clear.
At this point, the roam is complete from the application’s perspective.
7.7 Dissection of an ...