BOF session
Woman and IT
Megumi Takeshita,CEO
ikeriri network service co.,ltd

About Megumi Takeshita 竹下恵• Founder, ikeriri network
service co.,ltd• 10+ books about packet
capturing, analysis,inspection,• Reseller of Riverbed
Technology ( former CACEtechnologies ) and Metageek,and more in Japan• Attend all Sharkfest since 1st
Sharkfest !

Sharp X1 CK TV PC• My father works at a insurancecompany so my family moved alot ( Kagoshima, Niigata, Oita,Nagano, and more )• In Primary school age, I haveno friends and my mother tellme to study …
• My father bought X1 for hisbusiness but he never use this, Z80A/4MHz
Z-80A, X1 was my thread
64KB RAM• It need no time that I was
640*200*8colors
including 2700bps
captive of the Dream box
data recorder andwatch TV

Captive of 8bit Dream Box• X1 was clean computer ( noROM ) only with BIOS so so we
could load Basic, CP/M, andmachinery code
• Video system has character
generator, change VRAM area
assigned for other character sothat we can create new gamedot-based character using
crosshair papers• Scrolling screen is the mostinteresting things in X1, people
use screen mode, binary shift..

Backuping ( no W@res )• In 1980s there are software shopin Japan, those rental games in afew day ( oh !!!)• The protection war began
between vender and otaku.
• ROM ( NES or some) is easy,
cassette tape just dubbing• Floppy is the main Warfield that
we need to learn sector, BIOS,
FDC and Z80A mnemonic• Many protection style for example
change sector instruction in firstsector ( outside )Communication comes !
• X1 turbo with 2 5-inch FD andcommunication port gives future• At first 9600bps and Niftyserve( just as CompuServe in Japan )• Then V.24 and 14400bps withlocal BBS server and AT com• Finally V.90 appears but I am
scolded by my father because
NTT telephone fee costs very
expensive in a month• We were professional of editing
auto pilot software to compact
telephone fee

Amateur radio and Internet• There are possibilities that
we can connect TNC into theshack and use some
protocol such as UUCP orSIP but we have no suchenvironment in young age.
• My First internet is “firstclass, black mountain
service” with color classic
and system 6, KanjiTalk• Real time Coffee pot, CUSee me, many FTP servers

Growing Up Geek
• Windows95 in university• Digital camera !!
• I am mobile person thatuses heavy laptop ( may be3kg ! ) and many PMA/PDAdevices. (Tokyo by train )Cosplay and game show in Tokyo• video game generation• NES, SNES, SEGA
GENESIS, Dreamcast,Sony Playstation series,
and more game things• So Tokyo Game show
is the wondering event
so that people comes incostume and playgames !

Motorcycle days in Tokyo• I had become motorcycle otaku
after graduated school• Motorcycle is important inTokyo crazy traffic congestion

Sector dissection -> packet dissection• Then I worked at Bay Network in Tokyo
office, as IS and support selling Bay
Stack switches and accera router• After merged into Nortel, I also debug
many network / server things including
huge Exchange server trouble.
• Using Sniffer, ethereal, winmerge I
found the packet dissection is the sameas sector dissection !

DFS debugging example• In Japan ( may be in US ),we faces tons of wirelessproblems, and now CH is socrowded that people moveto W52, W53 bandwidth.
AP always listens the • DFS (Dynamic Frequency
radar signals, andSelection) and IEEE802.11h
when AP detected,
emerges one of the big
then changes Channel. problem in the wireless
30 min :AP cannot use troubleshooting
again the detected CH.
1 min :AP listen andcheck the CH is okChannel Switch Announcement not works• IEEE802.11h is notClients

APs•

Assosiationed
Rader detected
Channel Switch Announcement•Cdeauthenticated frame

CSWdisassociation frame

Beacon, probe req/res
Authenticate, association req/res•impremented well andthe behavors are different
CSA frame sends in old
CH or new CH ? It notworks we expected
APs sends
deauthenticated frame,disassociation frame inold/new CH ?
Clients can receive andchange immediately CH?

APs and Clients not works that we expected• We bring 8 AirPcapNXs and 8PCs

•
•
•
•

into the office and keep capturing
all the day in all W53, W56 CH,
come back with tons of pcap files.
After many dissection anddebugging, check logfiles and more
DFS problem happens 1 or 2 times
an hour in the inside office !!
AP was’nt send info, and Clients
didn’t start connection procedure
immidiately, all things are different
Update drivers,firmware and many.

Keep up holding your interests• Packet capturing anddissection is very muchinteresting so we can study ,work, think, holding
interests is important for me.

Thank you very much

Wireshark
and you