Changelog: * Updated version to 1.1 * Clarified that the network is at the first floor of Mercator 1. * Mentioned a bug we encountered in exercise 2a. If you do not see any associated clients but do see networks and unassociated clients, you should mail Pol. * Limited exercise 3b to just document those clients which are *most* active on the network. * Mentioned a bug in exercise 3b where the encrypted capture has unexplainable protocols, indicating a problem with the capture. Mail Pol if you hit this bug, you will get an encrypted reference capture. * Mentioned a bug in exercise 3c, where Ubuntu's airdecap-ng mangles decrypted WEP traffic during decryption. Indicators are missing UDP traffic, unexplainable and weird protocols in the protocol hierarchy, etc. If you hit this bug, use the decrypted reference capture available at * Reworded exercise 3f and 4 to reflect changes in the network setup. There are now several similar conversations to choose from, so that multiple groups can work on exercise 4 at the same time. However, you must still communicate with the others so you don't accidentally pick the same conversation. * Clarified how to connect to the network: netmask is /24, gateway is not present. * Minor hint on how to use arpspoof in exercise 4a.