Skip navigation
All Places > Products > RSA NetWitness Platform > RSA NetWitness Platform Online Documentation > Documents
Log in to create and rate content, and to follow, bookmark, and share content with other members.

Decoder: Wireless LAN Configuration

Document created by RSA Information Design and Development Employee on Sep 13, 2017Last modified by RSA Information Design and Development Employee on Jan 6, 2021
Version 26Show Document
  • View in full screen mode

One of the files available for editing in the Services Config view > Files tab is wlan-config.xml, the wireless LAN configuration file.

It controls the 802.11 parsers. Its chief purpose is to control decryption of raw 802.11 frames captured by the Decoder. This file is optional. If decryption of 802.11 traffic is not desired, there is no need to create the file.

There are five link-level parsers related to wireless LAN packet capture:

  • IEEE 802.11 parser (data frames and beacons only)
  • Radiotap w/ 802.11 header
  • Absolute Value Systems (AVS) w/ 802.11 header
  • Prism II w/ 802.11 header
  • CACEʹs ʺPer Packet Informationʺ (PPI) w/ 802.11 header

The 802.11 wireless parsers introduced in 9.8 all share a single configuration file. This wlan‐config.xml file is used to define any wireless access points the user may have in the network, and its primary purpose is to control decryption. The BSSID of the access point and the SSID that itʹs authoritative for is added to this file as well as all of the active default keys used by the access point.

Previous Topic:Search Parser
You are here
Table of Contents > Configure Parsers and Feeds > Configure Parsers > Wireless LAN Configuration