Changes

22 bytes removed ,  04:05, 17 June 2011
m
Clarifying recent edit
Line 110: Line 110:  
=== Subsequent Probe Request and Response Frames ===
 
=== Subsequent Probe Request and Response Frames ===
   −
The 3DS (#1) that the Initial Probe Response is directed to will send an 802.11 Action frame back to the device. It will then send another Probe Request, this time sent directly to the responding 3DS (#2) by specifying its MAC address in the destination field, and setting its own MAC address in the source address field.
+
The 3DS (#1) that the Initial Probe Response is directed to will send an 802.11 Action frame back to the device. The sequence numbers at this point stop stepping up by 3, and instead increase by one based from each originating device's SN. It will then send another Probe Request, this time sent directly to the responding 3DS (#2) by specifying its MAC address in the destination field, and setting its own MAC address in the source address field. It also does not have a SSID specified in the frame, except the frame will contain a BSSID with the value of the 3DS (#2) that responded to the initial Probe, and thus acts as the master in the 802.11 exchange.
 
  −
The sequence number for this frame is +2 the original Probe Request, with the Action frame having a sequence number +1 the initial Probe Request. It also does not have a SSID specified in the frame, except the frame will contain a BSSID with the value of the 3DS (#2) that responded to the initial Probe, and thus acts as the master in the 802.11 exchange.  
      
== StreetPass Spoofing ==
 
== StreetPass Spoofing ==
36

edits