capturing 802.11ac data
DESCRIPTION
Watch the full ondemand webcast here: http://bit.ly/1aOEYIb Gigabit wireless is quickly becoming a reality. With ratification of the 802.11ac specification right around the corner and a wide range of commercial 11ac devices already available based on the draft standard, the pressure is building to have a network monitoring and analysis system in place that can handle the demands of gigabit wireless. Is your wireless LAN (WLAN) network analysis system up to the task? Can it even capture 802.11ac traffic, let alone run at the speed necessary to handle gigabit data rates? Join us as we uncover the demands that 802.11ac places on WLAN analysis, and see a demonstration of the only complete WLAN analysis solution for 802.11ac – both analysis AND data capture.TRANSCRIPT
www.wildpackets.com © WildPackets, Inc.
Show us your tweets! Use today’s webinar hashtag:
#wp_80211ac with any questions, comments, or feedback.
Follow us @wildpackets
Jay Botelho
Director of Product Management
WildPackets
Follow me @jaybotelho
Capturing 802.11ac Data Wireless Gigabit Speeds Driving Changes
in Wireless Analysis
© WildPackets, Inc. #wp_80211ac
Administration
• All callers are on mute ‒ If you have problems, please let us know via the Chat window
• There will be Q&A ‒ Feel free to type a question at any time
• Slides and recording will be available ‒ Notification within 48 hours via a follow-up email
2
© WildPackets, Inc. #wp_80211ac
Agenda
• 802.11ac vs. 802.11n
• 802.11ac Basics
• 802.11ac Use Cases – Consumer vs. Enterprise
• Packet-Based WLAN Analysis
• WildPackets Corporate Overview
• WildPackets Product Line Overview
3
www.wildpackets.com © WildPackets, Inc.
802.11ac vs. 802.11n
4
© WildPackets, Inc. #wp_80211ac
802.11n: Higher Throughput Improvements
Using MIMO
• Description ‒ Significant enhancements in data rate and range
‒ Uses new technologies including MIMO, channel
bonding, aggregation, short guard interval
• Use cases and market penetration ‒ Becoming the de-facto standard for commercially
available WLAN equipment – both consumer and
enterprise
‒ High-density deployments; multimedia
applications; forklift upgrades
• Compatibility and analysis implications ‒ Backward compatible with a/b/g, but older technologies limit overall
improvements
‒ Not all network analysis software and hardware is up to the task
‒ Make WLAN analysis upgrades part of the overall 802.11n upgrade
5
http://linksys-
de.custhelp.com/app/answers/detail/a_id/21194/~
/intermittent-wireless-signal-with-802.11n-routers-
and-access-points
© WildPackets, Inc. #wp_80211ac
802.11ac: Very High Throughput <6 GHz
• Description ‒ Significant improvement over 802.11n –
higher throughput for less power
‒ Wi-Fi MIMO “multicast”
• Use cases and market penetration ‒ Commercial penetration for multimedia
over Wi-Fi
‒ WFA certification coming soon – based
on draft standard
‒ Will become the standard for 802.11
networking infrastructure going forward
• Compatibility and analysis implications ‒ Backward compatible with a/b/g/n, but older technologies limit overall
improvements
‒ Only operates at 5GHz, significantly reducing compatibility issues
‒ New speeds require new methods for detailed analysis
6
© WildPackets, Inc. #wp_80211ac
802.11ac vs. 802.11n
• Gigabit speed wireless with approximately 3 times the performance for
the same power
• Better performance at any range with fewer dead spots
• More reliable connections for media streaming with beam-forming
• More Wi-Fi bandwidth on your mobile
• Only utilizes the 5 GHz band - much less prone to interference
• Backward compatible to 802.11 a/n
http://www.netgear.com/landing/80211ac/images/wp_netgear_802_11ac_wifi.pdf
www.wildpackets.com © WildPackets, Inc.
802.11ac Basics
8
© WildPackets, Inc. #wp_80211ac
802.11ac Highlights
• 802.11n “lessons learned”
• Wider channel bandwidths; More MIMO
‒ 80 MHz and 160 MHz channel
‒ Support for up to 8 spatial streams
• Multi-user MIMO (MU-MIMO)
‒ Multiple STAs transmit or receive independent data streams
simultaneously
‒ Downlink MU-MIMO (one transmitting device, multiple receiving
devices) included as an optional mode
• Low level MAC and RF improvements
‒ Beam forming improvements
‒ MAC modifications (mostly to support above changes)
‒ Coexistence mechanisms for 20/40/80/160 MHz channels, 11ac and
11a/n devices
9
© WildPackets, Inc. #wp_80211ac
Example 802.11ac Configurations
http://en.wikipedia.org/wiki/IEEE_802.11ac
© WildPackets, Inc. #wp_80211ac
802.11ac Status
• Not scheduled for
IEEE ratification until
Feb 2014, but …
http://reviews.cnet.com/best-wireless-networking-devices/
© WildPackets, Inc. #wp_80211ac
802.11ac Status – And …
12
http://www.engadget.com/tag/802.11ac/
www.wildpackets.com © WildPackets, Inc.
802.11ac Use Cases
Consumer vs. Enterprise
13
© WildPackets, Inc. #wp_80211ac
802.11ac – “The Multimedia Home”
• Wi-Fi Direct
• Video streaming/set-
top boxes
• Data syncing and
backup
• 3G and 4G offloading
© WildPackets, Inc. #wp_80211ac
What Will Drive Enterprise Adoption?
• Ratification and certification
• Cost and availability
• Unique bandwidth needs
• The “yet-to-be-identified killer video app” –
telepresence??
• BYOD – grassroots pressure from mobile device
users
www.wildpackets.com © WildPackets, Inc.
Packet-Based WLAN Analysis
16
© WildPackets, Inc. #wp_80211ac
• Locally connected
devices
• Commercially available
USB devices
• Multiple devices for
channel aggregation
17
© WildPackets, Inc. #wp_80211ac
What Do You Need?
• Packet-based WLAN
network analysis software
• Supported WLAN
adapter(s)
• Special driver for WLAN
adapters
18
© WildPackets, Inc. #wp_80211ac
OmniWiFi USB WLAN Capture Adapter
• A single device for all WLAN packet capture needs
• Driver included with OmniPeek
• Tested and supported with OmniPeek and OmniEngine
• Product features:
• USB device with extension cable
• Dual band operation – 2.4GHz and 5GHz
• Supports all standard international 802.11 channels (a/b/g/n)
• Supports 802.11n - 3 transmit/receive streams (450Mbps)
• Supports 802.11n 20MHz and 40MHz channel operation
• Supports multi-channel aggregation and roaming
• Technical Details:
‒ Size (LWH): 6 inches, 1.5 inches, 5.5 inches
‒ Weight: 5.6 ounces
• Available via Amazon - $99/each
NOTE:
• Capture ONLY – no network services
• Does not capture 802.11ac
© WildPackets, Inc. #wp_80211ac
802.11ac Status – We’re Ready!
• Cisco AE6000/Ralink driver
• AE6000: 1-stream 802.11ac device
compatible with OmniPeek
• OmniPeek v7.8 and above
• Beta Ralink driver for AE6000 on MyPeek
20
© WildPackets, Inc. #wp_80211ac
USB Isn’t the Only Solution …
• I’m most probably NOT near the problem
• I still need supported devices
• I need supported devices that equal or exceed the
most capable devices on my network – now 802.11ac
• And, most importantly …
• USB MAY NOT up to the task!
21
© WildPackets, Inc. #wp_80211ac
USB
• USB 1.1 (Full Speed) ‒ September 1998
‒ 12 Mbps
‒ If you still have equipment with v1.1, get
something new!
• USB 2.0 (High Speed) ‒ April 2000
‒ 480 Mbps theoretical; 280 Mbps effective
‒ Extremely common for laptops in use
• USB 3.0 (Super Speed) ‒ November 2008
‒ 5 Gbps theoretical; 3.2 Gbps effective
22
© WildPackets, Inc. #wp_80211ac
Now Let’s Review
23
© WildPackets, Inc. #wp_80211ac
Doing Some 802.11ac Math
• Assume 2-antenna APs and STAs at 80MHz = 867
Mbps
• Assume effective throughput of 520 Mbps (60%)
• Assume you can “hear” 3 different APs
• If our analysis requires aggregating data from the 3
distinct APs together, the aggregated analysis
throughput is
• 1.56 Gbps
• Using USB devices, v3.0 is required for both the
WLAN adapters AND the laptop – not easy to find!
24
© WildPackets, Inc. #wp_80211ac
And It Will Get Faster …
• Assume an 8-antenna AP, 4 2-antenna stations at 160
MHz using MU-MIMO (1.73 Gbps to each STA)
• Assume effective throughput of 1.04 Gbps (60%)
• If our analysis requires aggregating data from the 4
STAs together, the aggregated analysis throughput
is
• 4.16 Gbps
• This exceeds the 3.2 Gbps effect rate for USB 3.0, the
very best the market has to offer
25
© WildPackets, Inc. #wp_80211ac
So, What “Now”?
• As wireless approaches wired speeds, it’s time to
start relying on the wire
• Distributed analysis using deployed assets – APs –
is the only effective solution as wireless speeds
grow
• The choices: ‒ Remote PCap
‒ Custom Remote Adapters
26
© WildPackets, Inc. #wp_80211ac
Remote Captures with OmniEngine
Remote Pcap Custom Remote
Adapters
© WildPackets, Inc. #wp_80211ac
Remote Pcap (cont.)
28
© WildPackets, Inc. #wp_80211ac
Custom Remote Adapters
29
www.wildpackets.com © WildPackets, Inc.
Demo
© WildPackets, Inc. #wp_80211ac
Mobile WLAN Analyzer Bundle
• OmniPeek Professional with 12 months maintenance
• 3 OmniWiFi USB WLAN Capture Adapters
• $2395 – over $900 in savings!
31
www.wildpackets.com © WildPackets, Inc.
Q&A
Show us your tweets! Use today’s webinar hashtag:
#wp_80211ac with any questions, comments, or feedback.
Follow us @wildpackets
Follow us on SlideShare! Check out today’s slides on SlideShare
www.slideshare.net/wildpackets
www.wildpackets.com © WildPackets, Inc.
WildPackets Corporate Overview
Optimizing Network and Application Performance
© WildPackets, Inc. #wp_80211ac
Corporate Background
• Experts in network monitoring, analysis, and troubleshooting
‒ Founded: 1990 / Headquarters: Walnut Creek, CA
‒ Offices throughout the US, EMEA, and APAC
• Customers spanning leading edge organizations
‒ Mid-market and enterprise lines of business
‒ Financial, manufacturing, ISPs, major federal agencies,
state and local governments, universities
‒ Over 7,000 customers / 60+ countries / 80% of Fortune 1,000
• Award-winning solutions that improve network performance
‒ Internet Telephony, Network Magazine, Network Computing awards
‒ United States Patent 5,787,253 issued July 28, 1998 • “Apparatus and Method of Analyzing Internet Activity”
© WildPackets, Inc. #wp_80211ac
Why Our Customers Need Us
• VoIP, video, cloud, virtualization, and key business
applications are saturating critical network services
• Evolving network technologies create discontinuities ‒ 1 Gig 10 Gig 40 Gig 100 Gig networks
‒ Wireless, BYOD initiatives
• Users and business can not tolerate network
problems for mission critical services
Increasing demand for better real-time network visibility,
network analytics, network forensics, and DPI
© WildPackets, Inc. #wp_80211ac
How We Create Value
We provide innovative, industry-leading, real-time
network performance management solutions
‒ Easy-to-use, easy-to-learn user interface
‒ Uniquely extensible solutions
‒ Wireless network leadership
‒ Detailed analytics related to network applications
‒ Fastest network traffic capture appliance in its class
‒ Technical superiority at competitive price point
WildPackets has continually advanced its solution to meet the needs of its
customers
© WildPackets, Inc. #wp_80211ac
ROOT-CAUSE ANALYSIS
OmniPeek network analyzer performs deep packet inspection
and can reconstruct all network activity, including e-mail and
IM, as well as analyze VoIP and video traffic quality.
UNDERSTAND END-USER PERFORMANCE TimeLine and Omnipliance network recorders monitor
and analyze performance across critical network
segments, virtual environments, and remote sites.
NETWORK HEALTH
WatchPoint can manage and report on key
device performance and availability across
the entire network, from anywhere on the network.
GLOBAL
DISTRIBUTED
DPI
Unprecedented Network Visibility
© WildPackets, Inc. #wp_80211ac
A History of Innovation
2003 Distributed real-time
troubleshooting
2001 • First 802.11
wireless analyzer
• First network
analyzer with
automated expert
analysis
2005 Combined distributed
network and VoIP
network analysis
2008 Enterprise-wide
Monitoring and Reporting
2009 Innovative dashboard
with drill-down for VoIP
and video
2012 • Capture, record, and
analyze from 40G
network segments
• First wireless network
analyzer to support
801.11ac, k, r, u, v, w
2011 • Total visibility with
zero packet loss
• First wireless
network analyzer to
support capture and
analysis of 802.11n
3-stream wireless
2010 First to achieve 11 Gbps
sustained capture-to-disk
www.wildpackets.com © WildPackets, Inc.
Product Line Overview
© WildPackets, Inc. #wp_80211ac
OmniPeek Enterprise Packet Capture, Decode and Analysis
• Ethernet,1/10 Gigabit, 802.11, and voice and video over IP
• Portable capture and OmniEngine console
• Aggregate analysis data across multiple capture points
Omnipliance / TimeLine Distributed Enterprise Network Forensics
• High-performance packet capture and real-time analysis
• Stream-to-disk for forensics analysis
• Integrated OmniAdapter network analysis cards up to 40G
WatchPoint Centralized Enterprise Network Monitoring Appliance
• Aggregation and graphical display of network data
• WildPackets OmniEngines
• NetFlow and sFlow
Omni Distributed Analysis Platform
© WildPackets, Inc. #wp_80211ac
Omni Distributed Analysis Platform Software and Turnkey Solutions
• Enterprise monitoring and reporting
‒ WatchPoint Server
‒ OmniFlow, NetFlow, and sFlow Collectors
• Software probes and network recorders
‒ Omnipliance network recorders – Edge, Core
‒ TimeLine network recorders
‒ OmniAdapter analysis cards
• Distributed analysis software
‒ OmniPeek – Enterprise, Professional, Basic, Connect
‒ OmniEngine – Enterprise, Desktop, OmniVirtual
• Portable solutions
‒ OmniPeek network analyzer
‒ Omnipliance Portable
© WildPackets, Inc. #wp_80211ac
Key New Features in v7
• 40G network support
• Analyze issues from end to end:
Multi-Segment Analysis (MSA)
• Collect data from non-technical end users:
OmniPeek Remote Assistant (ORA)
• Single, interactive dashboard for
utilization, top talkers, top protocols,
latency, Experts, flows, and wireless
signal strength
• New wireless specifications
‒ 802.11ac 802.11k
‒ 802.11r 802.11u
‒ 802.11v 802.11w
© WildPackets, Inc. #wp_80211ac
OmniPeek Network Analyzer
• Distributed analysis manager
‒ Connect to and configure distributed OmniEngines, Omnipliances,
and TimeLines
• Comprehensive dashboards present network traffic in real-time
‒ Vital statistics and graphs display trends on network and application
performance
‒ Visual peer-map shows conversations and protocols
‒ Intuitive drill-down for root-cause analysis of performance bottlenecks
• Visual Expert diagnosis speeds problem resolution
‒ Packet and payload visualizers provide business-centric views
• Automated analytics and problem detection 24/7
‒ Easily create filters, triggers, scripting, advanced alarms, and alerts
© WildPackets, Inc. #wp_80211ac
Omnipliance Network Recorders
• Captures and analyzes all network traffic 24x7
‒ Runs WildPackets OmniEngine software probe
‒ Generates vital statistics on network and application performance
‒ Intuitive root-cause analysis of performance bottlenecks
• Expert analysis speeds problem resolution
‒ Fault analysis, statistical analysis, and independent notification
• Multiple issue digital forensics
‒ Real-time and post capture data mining for compliance and troubleshooting
• Intelligent data transport
‒ Network data analyzed locally
‒ Detailed analysis passed to OmniPeek on demand
‒ Summary statistics sent to WatchPoint for long term trending and reporting
‒ Efficient use of network bandwidth
• User-extensible platform
‒ Plug-in architecture and SDK
© WildPackets, Inc. #wp_80211ac
TimeLine Network Recorder
• Continuous network recording and comprehensive
real-time statistical display — simultaneously ‒ 12Gbps sustained capture with zero packet loss
‒ Network statistics display in TimeLine visualization format
• Rapid, intuitive forensics search and retrieval ‒ Historical network traffic analysis and quick data rewinding
‒ Several pre-defined forensics search templates making
searches easy and fast
• A natural extension to the WildPackets product line
• Turnkey bundled solution ‒ Appliance + OmniEngine, OmniAdapter, OmniPeek Connect
© WildPackets, Inc. #wp_80211ac
Price/Performance Solutions for Every Application
Portable Edge Core TimeLine
Ruggedized
Troubleshooting
Small Networks
Remote Offices
Datacenter
Workhorse
Easily Expandable
Enterprise, Highly-
Utilized Networks
Aluminum chassis / 17” LCD 1U rack mountable chassis 3U rack mountable chassis 3U rack mountable chassis
Dual 2.13 GHz Quad-Core Intel
Xeon L5630 "Westmere"
Quad-Core Intel Xeon X3460
2.80Ghz
Dual Intel Xeon Quad Core
E5530 2.4GHz
Dual Intel Xeon Quad Core
X5560 2.8GHz
24GB RAM 4GB RAM 6GB RAM 18GB RAM
2 PCI-E Slots 2 PCI-E Slots 4 PCI-E Slots 4 PCI-E Slots
2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports
6TB SATA storage capacity 1TB SATA storage capacity 8/16TB SATA
storage capacity
8/16/32/48TB SATA
storage capacity
4.5Gbps CTD 1.1Gbps CTD 3Gbps CTD 12Gbps CTD
WildPackets Network Recorders
© WildPackets, Inc. #wp_80211ac
Centralized Monitoring for Distributed Enterprise Networks
• High-level, aggregated
view of all network
segments
– Monitor per campus, per
region, per country
• Wide range of network
data
– NetFlow, sFlow, OmniFlow
• Web-based, customizable
network dashboards
• Flexible detailed reports
• Direct link to detailed,
packet-based analysis
WatchPoint
© WildPackets, Inc. #wp_80211ac
Comprehensive Support and Services
Standard Support
Maintenance and upgrades
Telephone and email contacts
Knowledgebase
MyPeek Portal
Premier Support
24 x 7 x 365
Dedicated escalation manager
2 customer contacts per site
Plug-in reconfiguration assistance
WildPackets Training Academy
Public, web-based, and on-site classes
Complete curriculum: technology and product focused
Practical applications and labs covering network analysis,
wireless, VoIP monitoring and advanced troubleshooting
Consulting and Custom Development Services
Deployment, configuration, and assessment engagement
Systems integration and testing
Application integration, driver, decode, interface development
© WildPackets, Inc. #wp_80211ac
WildPackets Key Differentiators
• Visual Expert intelligence with intuitive drill-down
‒ Let computer do the hard work, and return results, real-time
‒ Packet /payload visualization is faster than packet-per-packet diagnostics
‒ Experts and analytics can be memorized and automated
• Automated capture analytics
‒ Filters, triggers, scripting, and advanced alarming system combine to provide
automated network problem detection 24x7
• Multiple issue network forensics
‒ Can be tracked by one or more people simultaneously
‒ Real-time or post capture
• User-extensible platform
‒ Plug-in architecture and SDK
• Aggregated network views and reporting
‒ NetFlow, sFlow, and OmniFlow
© WildPackets, Inc. #wp_80211ac
24x7 Network Monitoring,
Analysis, and Troubleshooting
www.wildpackets.com © WildPackets, Inc.
Thank You!
WildPackets, Inc.
1340 Treat Boulevard, Suite 500
Walnut Creek, CA 94597
(925) 937-3200