“Wi-Fi Doesn’t Stand For Anything. It Is Not An Acronym. There Is No Meaning.”

Let's start 2016 with a blog post that will surely get some of you thinking. As a professional who focuses on Wi-Fi communication I’m asked from time to time what does Wi-Fi mean?

The conversation usually goes something like this: What does Wi-Fi stand for?

Is Wi-Fi an acronym for something? Who came up with the term Wi-Fi? Who owns the name Wi-Fi? Is it WiFi or Wi-Fi?"

When I respond that Wi-Fi is a made up word I get the stare, usually followed by, "really?"

I think the biggest misunderstanding or assumption is many folks think Wi-Fi means “Wireless Fidelity”. This is almost always the response I get when I ask, "what do you think it means?"

Another point of interest is the proper term is Wi-Fi with the hyphen. While many of us, myself included, use the term WiFi that would not be the correct registered trademark. Wi-Fi is a registered trademark of the Wi-Fi Alliance. Here is a link to their brands.

http://www.wi-fi.org/who-we-are/our-brands

Read the entire blog post here: 
http://community.arubanetworks.com/t5/Technology-Blog/What-does-Wi-Fi-stand-for/ba-p/256914 

Cisco AP VCI 60 – “ServiceProvider”

I was helping another engineer troubleshoot a Cisco access point join problem. To my surprise I discovered the VCI was “Cisco AP c3500-ServiceProvider”

I can appreciate when I end a day with a quick reflection. Did I learn anything new today?

Yesterday was one of those days! I was assisting an engineer with an access point join problem. Of course, I took this opportunity to explain the access point join process and what to look for and how to troubleshoot.

We use DHCP option 43 as our means of joining Cisco access points to our network. After peeking at the DHCP configuration, more specifically the option 43 and VCI string, everything looked good. Other 3500s were joining fine, just these handful of access points were not joining.

I do the typical console into the AP. I see nothing of interest. The access point is not getting the controller IP from DHCP. So we span the switch port of the access point to sniff the access point traffic. I am curious as to what the access point is sending in the DHCP request packet.

To my surprise, the VCI 60 is showing “Cisco AP c3500-ServiceProvider”. Oh, there is my problem! Mistakenly a number of “ServiceProvider” access points were mixed in our access point shipment.

If you have access points not joining, just something to add to your troubleshooting check list!

Cisco WLC 5508 License Gotcha ! (12 AP WLC can only support 487 APs)

Did you know ? If you purchased a Cisco 5508 WLC with a 12 access point license you just limited yourself to 487 access points?

The Cisco 5508 is licensed based which means you can add access point licenses as your wireless grows. The Cisco 5508 allows a maximum of 500 access points. This is a new model for Cisco Wireless Lan Controllers. The now legacy 2000,2100,4400 and WISM1 were licensed by the hardware itself.

You can purchase Cisco 5508 WLC with a 12,25,50,100,250 or 500 access point capacity. Or you can purchase what Cisco calls adder licenses in the quantities of 25,50,100, and 250 access points after the fact.

The license limitation becomes an issue with your initial purchase of a 5508 with a 12 access point license.

Since Cisco only resells 25,50,100 and 250 access point licenses the MAX you will ever get on your WLC is 487 access points.

Note: A 5500 Series WLC with a base license of 12 can only support up to 487 total APs because only 25, 50, 100, and 250 adder licenses are supported.

 Read:

Understanding Cisco 5508 Wireless LAN Controller Licensing

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080b78104.shtml

p.s. Thanks Patton for the link!

Cisco WLC Code Version LDPE (Licensed Data Payload Encryption)

Did you go HUH?, like I did when I seen the LDPE code rev for the Cisco WLC? I opened a TAC case to find out what this was and this is what I was told.

Client data encryption is normally not done. LDPE  feature is Licensed Data Payload Encryption (LDPE). Data Payload Encryption allows for the data that travels between the Access Point and the WLC to be Datagram Transport Layer Security   (DTLS) encrypted.

Note: Non Russian customers using Cisco 5508 Series Controller do not need data DTLS license. If your controller does not have a data DTLS license and if the access point associated with the controller has DTLS enabled, the data path will be unencrypted

   AIR-CT5500-K9-7-0-116-0.aes (Regular image)

·         AIR-CT5500-LDPE-K9-7-0-116-0.aes (LDPE image)

It would appear that Russia has some requirements to encrypt their AP to WLC traffic internally.

NOTE: I came across a post by blogger/friend Sam C. @ sc-wifi.com that covers this subject in more detail. Thanks SAM! I should have called and opened a ticket with you instead! LOL

http://sc-wifi.com/2011/04/30/cisco-wlc-ldpe-images/

Cisco 3500 ECO Pack Special – Free 100 WCS PLUS+ License with each ECO pack purchase

Cisco is running a special for a while now which is not well advertised.

If you purchase Cisco Access Points model 3500 in ECO packs you will receive a WCS PLUS+ 100 access point license for FREE!

I understand when ordering the ECO pack, there is a special order number so you will need to ask your reseller.

KEEP IN MIND!

The PAK license for your 100 access point PLUS+ is actually in EACH ECO pack. So if you have someone install your access points, make sure you pull the PAK from each box.

If you are like me and did not know the PAK was in each box. Talk to your Cisco Sales Rep. He can have all your PAKs converted to a single PAK, if you ask him/her nicely … LOL

LINKS: http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps10981/qa_c67-604158.html

Q. Are 10-packs available?

A. Yes, the Cisco Aironet 3500 is delivered in 10-access point eco-packs that reduce packaging waste by more than 50% and can reduce shipping and installation costs. Additionally, the eco-pack includes a WCS PLUS Upgrade license for 100 access points at no cost.

Enjoy !

CWNP: Download your CWNP CDs

If you’re like me and have most of the CWNP material in PDF or Kindle format you don’t get the CDs.

CWNP offers the CDs for download. You can find them here:

http://www.cwnp.com/index/training/freeresources/sybex_download

Cisco Live 2011: CCIE Wireless Session (LAB v2) TECCCIE-8006

I sat the 8 hour CCIE Wireless session at Cisco Live on Sunday. Talk about brain swell. I was in good company with the likes of Blake Krone, Jason Boyers and others.

During the session I used twitter for my note taking, so if you’re following me then you may have noticed an abundance of tweets on Sunday with the #CCIEW and #CL11 hash tags. The session was very focused on most lab topics and lab v2 changes, expected on Nov 18^th  of this year.

CCIE WIRELESS BULLET POINTS

What made this event unique is the fact that the presenters have either wrote or participated in lab development content. You weren’t getting second hand information from someone else. There were MANY notable items and I will only share a few here. Again, I would recommend stopping by Blake’s and Jason’s blogs.

• CCIE Wireless v2 will be out Nov 18, 2011
• OEQ are getting ditched when v2 comes out
• IPv6 will be on v2
• MULTICAST, MUTICAST, MULTICAST
• CCIE Wireless v2 will be on M1 code release 7.0.116.0
• ACS 5.2, MSE and ANYCONNECT 3.0 are new additions
• Know RRM and ALL your default timers
• CCNP R/S is highly recommended
• OfficeExtends is a new addition, although the AP600 is not in the lab mix
• CCIE Wireless Quick Reference guide is near completion and should be out around November
• CCIE Wireless v2 will no longer come with a paper workbook, rather a digtial one on the pc

Comments I found interesting

“ 95% of the LAB is based around best practices ”

“ 45 CCIE Wireless world wide. 60% of which are Cisco employees ”

“ 25 of the 45 CCIEs are in the US”

“ The first female CCIE W passed this week, again Cisco employee ”

“ CCNA level R/S will not be enough to pass the wired side tasks of the CCIE W ”

“ The lab can be completed in 5 -6 hours “

“ Average 3 attempts to pass the exam “

DEMO LAB / SOLUTION GUIDE

Each person received a demo lab book which is an “example” of a mock up lab. When asked if we could share this document, although its just an “example” lab we were given the “look”. 

The presenters also shared how the lab is graded. This was a good eye opener for most of us in the class. As the CCIE W is manually graded it was interesting to see how it was done. In short, the example lab was 22 pages with about 40 pts. The solution guide that the proctor uses in this example was 68 pages. The guide was color coded. Yellow represented what the config on the lab should represent exactly. While blue was variable.

In closing. It was worth the extra $1,000 bucks to sit this class. The presenters all did a great job.

Presenters

Stephen Orr Distinguished Systems Engineer
Javier Contreras Albesa System Engineering - WNBU Escalation
Erik Vangrunderbeek Product Manager
Matt Swartz Technical Leader
Secondary Speaker:   Davie Chia Product Manager

NOTES:

You can find my tweets @wirelesssguru and I have included links to Blake’s and Jason’s blog post.

Blake Krone:

http://blakekrone.com/2011/07/10/cisco-live-2011-day-1-ccie-w-techtorial

Jason Boyers:

http://blog.ipexpert.com/2011/07/11/cisco-live-news-and-updates-ccie-wireless/

WLC: Internal Anchoring Solves VRF Challenge

Internal Anchoring -- Thinking outside of the box

Cisco’s unified guest architecture, also referenced as ‘anchoring or auto anchoring’ is a common way to provide a secured wireless guest solution in an enterprise environment. What makes this secure and unique is the native frame generated by the wireless guest never touches the network switch fabric, until it egresses the anchors outside controller port where the encapsulated frame is unwrapped. At which point, the 802.11 header is stripped and 802.3 headers are installed and the frame is placed on the wire.

You can read more about anchoring here:

http://revolutionwifi.blogspot.com/2010/10/auto-anchor-mobility-fundamentals.html

http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mobil.html

Commonly, when the term ‘anchoring’ is mentioned, guest access comes to mind. However, recently I was presented with a challenge where I leveraged Cisco’s anchoring capability to solve a VRF problem. I coined it as, “internal anchoring”.

We have a very large network and deploy VRFs around our campus to segment a certain user group. We were presented with a problem where we could not access the VRF for testing purposes at our IT office, because we did not have our VRF network configured at the IT office location. 

We could have dragged the VRF to our office, which would have involved a good deal of configuration and since it was only going to be used for testing by a handful of network engineers it would have been a lot of work.

So, we did the next best thing…

The location (building), where the VRF user group lives also lives a number of Cisco WLCs supporting wireless connectivity for this VRF building. For sake of this post the WLCs living in this building will be called the VRF/WLC. 

An SSID was created on one of the VRF/WLC as WLAN: VRF_TEST. This WLAN was then anchored to itself, as normal anchoring procedure.

On the other end, at the IT office also lives a WLC. This WLC was providing wireless connectivity to the IT office.  For sake of this post the WLC living in the IT office will be called the IT OFFICE/WLC.  The WLAN: VRF_TEST was created on the IT OFFICE/ WLC and then anchored to the VRF/WLC.

This anchoring process will allow us to simply connect to the VRF_TEST at the IT office and have access to the VRF at the VRF building just like if we were physically there in person. This configuration effort took less than 5 minutes.

** Note: Mobility Group configuration was also required **

Cisco Wireless Solutions Software Compatibility Matrix

Updated Wireless Matrix, December 2010 for WCS, WLC, Mesh and more !

This is a "must check" for your dependencies prior to upgrading.

December 2010

This document describes the software compatibility matrix for the Cisco wireless devices used in a Cisco Centralized and Distributed WLAN Solution.

• Software Release Compatibility Matrix
• Mesh and Mainstream Controller Software Releases
• Wireless Control System Compatibility Matrix
• Inter-Release Controller Mobility (IRCM)

Cisco Wireless Solutions Software Compatibility Matrix PDF download



Why the Mythbusters won't do RFID

  

This is a great caption from Adam Savage about why they wont do an RFID show on the use and hacking of RFID. This video rippled through the web. 

Wi-Fi Aerial Surveillance Platform (W.A.S.P)

  

WIFI Hacking from the sky... You have to love it !

(From www.rabbit-hole.com)

 

When two guys interested in computer security get bored, it's usually a recipe for trouble. (Wi-Fi Aerial Surveillance Platform). It's an autonomous Unmanned Aerial Vehicle (UAV) that we built in our garage with onboard war-driving gear, among other things. 

 

It didn't take long before we decided Wi-Fi networks weren't enough. So we added Bluetooth, Cellular, and imaging capabilities that we can easily add and remove based on our needs. It all plugs into an onboard USB hub, so the possibilities are infinite. 

 

Oh, and we're not Dutch. Mike (a.k.a. RedQueen) lives in Indiana. Rich (a.k.a. WhiteQueen) lives in Illinois. We're Midwest, corn-fed Americans. Not that there's anything wrong with being Dutch. 

 

Our goals were relatively simple. We wanted it to be cheap enough that we wouldn't go broke building it. Not wanting to scratchbuild every component, it needed to use as much off-the-shelf equipment as possible. It needed to fly long enough to be able to do something interesting. One person should be able to load it in and out of a station wagon without any special equipment. Finally, and most importantly, we wanted anyone to be able to follow in our footsteps without needing to be a PhD, electrical engineer, or aeronautical engineer. 

 

The airframe is a surplus U.S. Army target practice drone. A DIY Drones "ArduPilot" (based on the popular Arduino) controls the avionics. An onboard Via Epia Pico ITX PC with a Via C7 500 MHz CPU with 1 GB RAM, running the Backtrack 4 suite provides the "surveillance" capabilities.

It communicates with a ground station for real-time tracking, payload interaction, flight operations, and data download. An ArduStation in the base station receives the telemetry data. The base station runs on a 1 GHz Via Pico ITX PC with 1 GB of RAM. It allows us to establish a Secure Shell link via a PPP tunnel. Additionally, it can serve as a network router for connecting additional workstations to the payload system. The UAV also contains an Edge/3G connection, giving the aircraft onboard Internet connectivity. This connection allows the operator to control the payload from anywhere in the world -- including mobile devices. It also allows for processor-intensive applications, such as WPA attacks and password cracking, to be offloaded securely in real-time to a remote computing powerhouse utilizing CUDA technology, for mind-blowing performance. 

 

Altogether, WASP weighs approximately 13 pounds, with a length of 76 inches and a wingspan of 67 inches. Its flight time is approximately 30-45 minutes, with a maximum estimated altitude of around 22,000 feet. It flies a preprogrammed set of GPS coordinates, while collecting data, and returns to base. We can also interrupt the course, and cause the UAV to "loiter" around an interesting target, allowing us more time to investigate. 

http://www.rabbit-hole.org/

Cisco Visio Stencils

  

The last 2 weeks I responded to a number of forum post by others looking for the Cisco Stencils. So I thought I would add the link here as well

You will need Microsoft Visio Standard or Professional in order to see these stencils correctly. Be sure to download the add-ons to enjoy the full functionality of all the Cisco Visio Stencils listed below.

The documents listed for download on this page are .vss files within .zip files

http://www.cisco.com/en/US/products/hw/prod_cat_visios.html

Atheros sampling 450Mbps 802.11n Wi-Fi chipset

  

This is by John Cox from Network World. 

http://www.networkworld.com/news/2010/060210-atheros-wifi-chipset.html?page=1

Chip maker Atheros Wednesday released samples of its powerful new 802.11n Wi-Fi chipset, which tops out with a maximum data rate of 450Mbps for access points and routers, and a signal that's more consistent and resilient.

The 11n standard uses several innovations to boost data rate and throughput, and to maintain those higher levels consistently over longer distances compared to 802.11abg radios.

Like earlier Atheros 11n silicon, the new AR938x and AR9390 chipsets also have three antennas, part of a technology called multiple input multiple output (MIMO). With multiple antennas tuned to the same channel, the radio uses spectrum more efficiently, increasing overall performance. In addition, with multiple antennas on both ends of the send-receive chain, MIMO systems can recombine reflected signals to enhance them (otherwise these multipath reflections typically disrupt the signal).

Another part of the 11n innovation is using what are called multiple spatial streams, or distinct, separately encoded signals within a single spectral channel. Think of it as sending data in parallel: a lot more data in a given time or a given amount of data in much less time. The impact of multiple antennas and spatial streams is also affected by other optional techniques the vendor may implement. 

In the past, Atheros and most other Wi-Fi chip vendors have had at best a three-antenna configuration with two spatial streams, for a maximum data rate of 300Mbps. The new chips are Atheros' first to use three spatial streams, one for each antenna pair, boosting the rate to 400Mbps.

Atheros will offer the new 3x3 chipsets at a "similar price range" to the previous generation chipset, says Tony Hsu, senior director of product marketing for Atheros' networking business unit.

A couple of vendors are offering 4x4 MIMO radios. Quantenna Communications has such a product in trials with a dozen carriers, aiming at multi-media applications within a home. It's a development that emphatically makes sense, says Network World blogger Craig Mathias. 

The new products also include a range of 802.11n options, including transmit beam forming, which can be thought of as narrowing and focusing the radio signal to increase its range and decrease the impact of interference. Other techniques are Low Density Parity Check for much more efficient error-correction coding, and Maximum Likelihood equalization algorithms to demodulate the received signal with much greater accuracy than other methods.

Adding these techniques to a three-spatial stream chipset results in 50% greater range or up to 66% higher effective bandwidth, depending on the specific operating conditions, according to Atheros.

Apart from the raw increase in data rate and range, these kinds of advances also mean an improved radio environment for video and other streaming media. According to Atheros, its new 11n silicon can slow down the top data rate to reduce packet loss and latency, thus improving the quality of the video transmission. Other algorithms search for unused radio channels for the video stream. Atheros says the chipsets can support three simultaneous high-definition video streams.

The chipsets are available in sample quantities with full production due to ramp up in the third quarter.

IEEE 802.11n Standard Available for download

  

The IEEE has released the 802.11n Standard for download. Enjoy!

http://standards.ieee.org/getieee802/download/802.11n-2009.pdf 

"Official Study Guide" trap! - Just my 2 cents!

 

All to often folks fall into the "Official Study Guide" trap! By this I mean folks assume that all of their exam questions and answers will be in the "HOLLY” Official Study Guide.

Sorry to burst your bubble, but that just isn’t the case. If you sit any exam today don’t be surprised to get questions not in the official study guide! Don’t feel bad; I was in that same boat, "man I read the entire book 3 times. I did the cd 5 times, but that question just wasn't in the book!!". Silly me ... 

Regardless of your focus (wireless, security or wired). You need to focus on the exam objectives, PERIOD. If your exam objectives are the "Fundamentals of Wireless" for example, it is best to read this topic from different authors. This will give you a different perspective from each author. A lot of folks don’t realize that the authors of the books we read called the “Official Study Guide” have no advance knowledge of the questions being asked! You read that right ... They are contracted to write about specific exam topics. Its then up to the author to share his knowledge and articulate it well so that we can all understand.  If you get a crappy author, guess what ... you get crap! Having personally spoken to a number of authors and having a close friend who was a co-author on the CWSP book, they will tell you. They have ZERO KNOWLEDGE of specific questions pertaining to the exam.

To drive my point home....

The name Dave Hucaby may ring a bell. He is the author of countless Cisco Press books, great author by the way. He is blessed with an extraordinary writing ability. I own a number of his books. He commented just yesterday on Cisco Learning Network about how he "neither writes, screens, nor approves the questions that are on the exam. I only write a book about what I think will appear on it, to the best of my knowledge"

"Dave Hucaby:

While we're discussing surprise topics on the exam, has anybody gotten a question that was specific to the Catalyst 6500? I've gotten a report from two test takers that saw some of those crop up. The 6500 is not supposed to be on the exam blueprint (really? how can you tell?), and apparently it received coverage in the beta SWITCH exam, but has since been removed.

Be advised that I neither write, screen, nor approve the questions that are on the exam. I only write a book about what I think will appear on it, to the best of my knowledge”

https://learningnetwork.cisco.com/docs/DOC-6566

IN SHORT … STUDY THE EXAM OBJECTIVES!

Free 2nd shot voucher on all CWNP Exams from May 1 – August 31, 2010

  

GREAT DEAL from CWNP! If you are slaving away to become CWNP certified you dont want to pass up this DEAL!

Here’s how it works.

• Take the CWTS (PW0-070), CWNA (PW0-104), or CWSP (PW0-204) exam between May 1 and August 31, 2010.
• If you do not pass the exam, send us your Pearson VUE score sheet via fax (866-422-8354) or email (customercare@cwnp.com).  Make sure we get your full name and email address.
• Within 15 business days, we will email you your free second shot exam voucher.

It really is that simple.  We want you to go into any exam with confidence that you can pass the exam.  Below are some caveats that we want you to be aware of.

• You must TAKE the exam between May 1 and August 31, not just buy your exam voucher or register for the exam.
• We will validate all 2nd Shot submissions with the Pearson VUE Testing Center
• Only one 2nd Shot voucher per failed exam.
• No substitutions: if you fail CWSP, you can’t get a free shot at CWNA, for example.
• All 2nd Shot Exam Vouchers will expire on Dec 31,2010.
• No returns, substitutions, or exchanges on 2nd Shot Exam Vouchers

http://www.cwnp.com/index/store/promos#free2ndshot

ASK THE EXPERTS - CCIE WIRELESS

  

CISCO is hosting "ASK THE EXPERTS - CCIE Wireless". THIS ENDS MAY 21ST. If you are studying for the CCIE Wireless, you dont want to miss this event!

https://supportforums.cisco.com/message/3068777#3068777

Welcome to the Cisco Networking Professionals Ask the Expert conversation. This is an opportunity to get an update on the CCIE Wireless Certification with Cisco expert Javier Contreras. Javier Contreras is a senior escalation engineer for the Wireless Business Unit focused on the EMEA region. He is involved in high-priority support cases for wireless infrastructures, CCIE Wireless development, wireless security testing, and leading the Cisco Wireless LAN Controller (WLC) Configuration Analyzer application. Previously at Cisco, he has worked in security consulting and training. He has 13 years of experience in IT and networking industry. Contreras also contributed to the Cisco Press book "Deploying and Troubleshooting Wireless Networks." 

Remember to use the rating system to let Javier know if you have received an adequate response. 

Javier might not be able to answer each question due to the volume expected during this event. Our moderators will post many of the unanswered questions in other discussion forums shortly after the event. This event lasts through May 21, 2010. Visit this forum often to view responses to your questions and the questions of other community members.

ASK THE EXPERTS - CISCO CLEAR AIR TECHNOLOGY

 

Cisco hosts "Ask The Experts" events where you can ask the people in the know questions. This ends may 21st. 

https://supportforums.cisco.com/message/3068840#3068840

Welcome to the Cisco Networking Professionals Ask the Expert conversation. This is an opportunity Learn how to avoid wireless interference problems and speed WLAN troubleshooting with Cisco expert Jim Florwick. Jim Florwick has over 20 years experience in the design, integration, and maintenance of wired and wireless communications networks. Florwick joined Cisco as part of the Cognio acquisition in 2007. He is a member of the Technical Marketing Engineering team for Cisco’s Wireless Business Unit.  Florwick has been focused on Radio Resource management (RRM) and CleanAir product development.  Prior to Cognio, he designed and deployed mission critical networks for many Fortune 500 enterprises and leading organizations through his senior consulting positions at NCR, AT&T and Ventus Networks.

Remember to use the rating system to let Jim know if you have received an adequate response.

Jim might not be able to answer each question due to the volume expected during this event. Our moderators will post many of the unanswered questions in other discussion forums shortly after the event. This event lasts through May 21, 2010. Visit this forum often to view responses to your questions and the questions of other community members.

Guy gets 4 years for selling knockoff Cisco GBICs

 

Greed is a nasty thing. It will send this guy up the river for 4 years and likely will get him deported. Note to self: If the contract states genuine Cisco products. Knockoffs don't count!

By DALE LEZON Copyright 2010 Houston Chronicle

May 6, 2010, 2:09PM

Saudi man who lives in Sugar Land was sentenced to federal prison for supplying counterfeit Cisco Systems Inc. computer parts to the Marine Corps in Iraq.

Ehab Ali Ashoor, 49, was sentenced to four years and three months in prison after he was convicted at trial in January, federal authorities announced today.

Ashoor also was ordered to pay $119,400 restitution to Cisco.

He also is subject to deportation after he serves his sentence.

Federal officials said Ashoor bought counterfeit Cisco Gigabit Interface Converters (GBICs) from an on-line vendor in China to satisfy a contract he had with the Marine Corps to deliver genuine Cisco parts.

According to the evidence introduced at his trial, Ashoor, through his company CDS Federal Inc., was awarded a contract to supply 200 Cisco GBICs to the Marine Corps to be used in their computer network at a base in Al Taqaddum, Iraq, federal officials said.

Federal authorities said the contract specifically stated the GBICs had to be genuine Cisco products.

But Ashoor bought 200 GBICs from a Hong Kong vendor off eBay for approximately $25 each and told the vendor he wanted them to be in Cisco packaging, federal officials said.

Federal authorities said his contract called for Ashoor to be paid $595 per GBIC for a total contract price of $119,000.

In attempting to satisfy the contract with counterfeit products, Ashoor paid only $5,500 for the 200 counterfeit Cisco GBICs from China, federal officials said.

Update on Saturday, May 8, 2010 at 12:20AM by George

HOUSTON — A Saudi man was sentenced Thursday to four years in prison for selling counterfeit computer parts to the Marine Corps for use in Iraq and Afghanistan.

The sentencing of the Saudi, Ehab Ashoor, 48, who lived in Sugar Land, Tex., was part of a broader federal crackdown on shady businesses that supply shoddy computer goods to the military and federal agencies.

Next month, two Houston brothers, Michael and Richard Edman, are scheduled to be sentenced after pleading guilty to selling computer network cards to the Marine Corps, Air Force, F.B.I., Federal Aviation Administration and Energy Department, among other agencies.

Judge David Hittner of United States District Court sentenced Mr. Ashoor on Thursday to 51 months in prison, the maximum term recommended by federal prosecutors. Mr. Ashoor sat slumped in his chair as the judge read the sentence.

When the prosecutor pointed out that Mr. Ashoor had shown disregard for the men and women serving in Iraq, the judge quipped, “Well, they’re obviously not his men and women.”

“See that he is deported,” Judge Hittner said, raising his voice in anger, after handing down the sentence.

Erich Ferrari, Mr. Ashoor’s lawyer, said he would appeal the sentence. Mr. Ashoor was convicted of buying 200 counterfeit networking cards in Hong Kong that were inferior copies of the Cisco Systems cards he was under contract to provide to the Marine Corps. The cards are used in helicopters, airplanes and computer equipment to transmit data about troop movements and other sensitive information.

“This guy was getting rich and didn’t care about what goes into our airplanes and helicopters in Iraq and Afghanistan,” said John Morton, assistant secretary of homeland security.

Mr. Ashoor’s company, CDS Federal, bought the cards on eBay for $25 each in July 2008 and charged the Marine Corps $625 each, the indictment said. He also repackaged the cards to make them appear to be Cisco products.

Mr. Ashoor’s wife, Nargus Khan, 40, said they had lived in the United States for 20 years and had two children, but had remained citizens of Saudi Arabia. She said the family now faced financial hardship; Mr. Ashoor was forced to pay Cisco $119,000 in restitution.

Mr. Morton said the shoddy computer parts were never used. Customs agents noticed something amiss with the shipment and referred it to investigators, so the Marine Corps stockpiled the parts until the inquiry was finished, he said.

The Edman brothers were involved in a similar scam through their compay, Syren Technology, Mr. Morton said.

Aircrack-ng 1.1 Released (4/25/2010)

 

I'm a big fan of Aircrack-ng. Looking forward to test release 1.1.  

Are you new to wireless security and never heard of Aircrack-ng ??

WiKi: http://en.wikipedia.org/wiki/Aircrack-ng

Aircrack-ng is a network software suite consisting of a detector, packet sniffer, WEP and WPA/WPA2-PSK cracker and analysis tool for 802.11 wireless LANs. It works with any wireless card whose driver supports raw monitoring mode (for a list, visit the website of the project or [1]) and can sniff 802.11a, 802.11b and 802.11gtraffic. The program runs under Linux and Windows; the Linux version has been ported to the Zaurus and Maemo platforms, and a proof-of-concept port has been made to the iPhone.

Offical Aircrack-ng Blog: http://aircrack-ng.blogspot.com/2010/04/aircrack-ng-11.html 

A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.

Here is the changelog:

- airdrop-ng: New tool by TheX1le.

- airodump-ng, aircrack-ng, airdecap-ng, airbase-ng: Fixed buffer overflow in airodump-ng due to forged eapol frame.

- aircrack-ng: Fixed multicast detection (WPA handshake detection).

- airodump-ng: Added interaction (see wiki for the commands).

- airodump-ng: Fixed client time in netxml file.

- airtun-ng: Add WDS and bridge support.

- airbase-ng: automatically set privacy bit to 1 if WPA or WPA2 is used (-Z or -z option).

- airmon-ng: Updated iw URL for v0.9.19.

- airdriver-ng: Fixed link for madwifi-ng.

- aireplay-ng: Chopchop enhancement to not stop but wait on deauth packets.

- tkiptun-ng: Fixed segfault.

- wesside-ng: Fixed compilation bug with recent version of gcc.

- cygwin: Compiling sqlite isn't necessary anymore, libsqlite3-devel package can be used.

- osdep: Strict aliasing and x86_64 fix.

- osdep: Add tap support for Darwin/OS X. Still require tuntaposx from sourceforge to work.

- All: Fixed compilation on cygwin 1.7.

- All: Fixed compilation on recent version of OSX.

- manpages: Fixed aireplay-ng manpage for attack 0: not disassociation packets, deauth packets.

- manpages: Added the keys for interaction in airodump-ng.

- patches: Added regulatory domains override patches for atheros drivers (ath5k, ath9k and ar9170).

- patches: Added 2.6.32 patch for r8187 driver (ieee80211).

- Makefiles: Fixed make uninstall.

Aircrack-ng 1.1Aircrack-ng 1.1 is released ;)
A lot of bug fixes (including the buffer overflow in different tools) and improvements have been done. The most noticeable changes are the addition of airdrop-ng by TheX1le and the interaction in airodump-ng.