Installation guide

Chapter 10
148 Sniffer Technologies
The Expert stores the value specified in the Duration field in a buffer. If it does
not see the corresponding ACK to the frame (identified by matching sequence
numbers) within the value specified by the Duration field, it generates this
alarm.
Association Failure
The Expert generates the Association Failure alarm when it detects an
802.11 Association Response frame with a value other than zero in the Status
Code field. A non-zero value in the Status Code field indicates that the access
point sending the Association Response is denying the requested association.
To be a member of an infrastructure 802.11 wireless network, wireless stations
must be associated with an access point. Wireless stations send Association
Request frames to become associated with an access point. In turn, access
points reply to Association Requests with Association Responses indicating
the success or failure of the request. In this case, the access point denied the
association request. The exact reason for the denial is found in the Status
Code field of the Association Response. The Expert reports both the address
of the access point denying the Association Request, as well as the reason for
the denial indicated in the Status Code field.
 1 — Unspecified failure.
 10 — Cannot support all requested capabilities in the Capability
Information field.
 12 — Association denied due to reason outside the scope of the 802.11
standard.
 17 — Association denied because the access point is unable to handle
additional associated stations.
 18 — Association denied due to requesting station not supporting all of
the data rates in the BSSBasicRateSet parameter.
Authentication Failure
The Expert generates the Authentication Failure alarm when it detects an
802.11 Authentication frame with a value other than zero in the Status Code
field. A non-zero value in the Status Code field indicates that the access point
sending the Authentication frame is denying the requested authentication.