Have you ever been asked if Wi-Fi is bad for our health? If you work with Wi-Fi you will have faced this question at least once, if not once every other month. There is a lot of misinformation, but lets not start with that.
Recently I was asked to provide advice on the safety of Wi-Fi in regards to human health - this came up because I had made a recommendation to place Access Points underneath seats in a tiered seat (cinema style) theatre. The under-seat design is a story for another time. It occurred to me that the audience who had raised the concern of the proximity of Access Points to people would most likely be non-technical and would not had heard "The Spiel" before. I wanted to be as prepared as possible and armed with the most up to date information I could find. So I spent an entire Saturday reading through information - here is what I found.
When reading about the effects of electromagnetic energy exposure it is important to note the radio frequencies of Wi-Fi are limited in range. Many of the studies and documents that are available relate to much wider frequencies (e.g. 0 - 300 GHz) or very targeted frequencies used in other technologies such as cellular base stations for mobile phones. The most common frequencies used for Wi-Fi occur between 2.4 GHz and 5.9 GHz.
It is also important to note that the majority of Wi-Fi deployments will operate at a transmission power much lower to the services in other frequencies such as cellular, TV and Radio broadcast.
While I've provided links to the various articles and content I have also included snippets for those who find it all a bit TLDR.
ARPANSA - Australian Radiaton Protection and Nuclear Safety Agency
Australian Government’s primary authority on radiation protection and nuclear safety. ARPANSA protect the Australian people and the environment from the harmful effects of radiation through understanding risks, best practice regulation, research, policy, services, partnerships and engaging with the community.
ACMA - Australian Communications and Media Authority
The independent statutory authority tasked with ensuring most elements of Australia's media and communications legislation, related regulations, and numerous derived standards and codes of practice operate effectively and efficiently, and in the public interest. ACMA is a 'converged' regulator, created to oversee the convergence of the four 'worlds' of telecommunications, broadcasting, radio communications and the internet.
WHO - World Health Organisation
The World Health Organization (WHO) is a specialized agency of the United Nations that is concerned with international public health.
IEEE - Institute of Electrical and Electronics Engineers
The IEEE Standards Authority is an organization within IEEE that develops global standards in a broad range of industries, including: power and energy, biomedical and health care, information technology and robotics, telecommunication among others.
What They Say
ACMA: The ACMA and EME
The ACMA regulates EME from consumer devices such as mobile phones, baby monitors, cordless phones and smart meters with inbuilt antennas through the Radiocommunications (Compliance Labelling - Electromagnetic Radiation) Notice 2014 (the EME Labelling Notice) and the Radiocommunications (Electromagnetic Radiation-Human Exposure) Standard 2014 (the Human Exposure Standard).
The ACMA has found that EME exposure from Wi-Fi transmitters is significantly below the limits of the ARPANSA Standard.
ARPANSA: Wi-Fi in Schools Measurement Study
This study showed that the typical RF exposure of children from Wi-fi at school is very low and comparable or lower to other sources in the environment such as radio and TV broadcasts and mobile phone base stations.
ARPANSA: Wi-Fi and Health
It is the assessment of ARPANSA and other national and international health authorities, including the World Health Organization (WHO), that there is no established scientific evidence of adverse health effects below current exposure limits.
WHO: Electromagnetic Fields and Public Health
In fact, due to their lower frequency, at similar RF exposure levels, the body absorbs up to five times more of the signal from FM radio and television than from base stations. This is because the frequencies used in FM radio (around 100 MHz) and in TV broadcasting (around 300 to 400 MHz) are lower than those employed in mobile telephony (900 MHz and 1800 MHz) and because a person's height makes the body an efficient receiving antenna. Further, radio and television broadcast stations have been in operation for the past 50 or more years without any adverse health consequence being established.
IEEE: Standard for Safety Levels with Respect to Human Exposure to Radio Frequency Electromagnetic Fields, 3 kHz to 300 GHz
Federal Legislation: Radiocommunications (Electromagnetic Radiation - Human Exposure) Standard 2014
The measurement methods to determine if the aware user device or non- aware user device meets the standard for performance in subsection 8 (1) or 8 (2) are the measurement methods identified in EN 62209-2 or IEC 62209- 2.
A test report must comply with the requirements in EN 62209-2 or IEC 62209-2 which contained the measurement methods identified in accordance with subsection (2).
WHO: Handbook on Establishing a Dialoge on Risks from Electromagnetic Fields
Public Health England: Exposure to electromagnetic fields from wireless computer networks
The duty factor investigation shows that laptops and access points transmit for only small proportions of the time during typical lessons less than 1% of the time for laptops and less than 12% for access points. This means that the time-averaged exposure arising from the use of laptops in schools is even lower than those when laptops were measured under controlled conditions in the laboratory, and the SARs will also be smaller than those estimated above.
Who Else Shares Information
The Wi-Fi Alliance and Wi-Fi equipment manufacturers (aka Vendors) also submit perspectives and points of information to the mix. I deliberately leave material sourced from these organisations to last as it is, in most cases, referencing other material already covered by other organisations. It's also worth noting that both vendors and the Wi-Fi Alliance have an obvious bias towards finding and presenting the positive side of the story.
It is my opinion that the Wi-Fi Alliance should not be considered a reliable source for health or medical based information. Vendor information should be followed for safe use and operation guidelines but like information from the Wi-Fi Alliance should not be used as the basis for medical advice.
WFA - Wi-Fi Alliance
Wi-Fi Alliance defines innovative, standards-based Wi-Fi technologies and programs, certifies products that meet quality, performance, security, and capability standards, provides industry thought leadership, and advocates globally for fair spectrum rules.
WFA: Wi-Fi® and Health/Safety Brochure
The wireless industry continually monitors information about RF health and related regulatory or policy changes to stay informed of up-to-date research and to be sure that the public can continue to have confidence in the safety of its products. In addition, Wi-Fi Alliance® supported two independent research studies both published in Health Physics, a peer-reviewed scientific journal. The first was an independent exposure study that conducted 356 measurements at 55 sites (including schools and hospitals) in four countries around the world. This study concluded that in all cases, the measured Wi-Fi signal levels were very far below international exposure limits (IEEE C95.1-2005 and ICNIRP) and in nearly all cases, far below other RF signals in the same environments.
WFA: Wi-Fi and Health
Due to the ubiquity of Wi-Fi technology, questions about the safety of radio waves and Wi-Fi devices tend to arise from time to time. The wireless industry takes these concerns very seriously.
Aruba’s Position on Health Concerns associated with Radio Frequency Exposure from WiFi
Aruba is committed to providing products which are safe for our customers to own and use. Aruba’s wireless products are tested to ensure that they meet international RF safety standards. RF safety standards are regularly reviewed against the latest scientific studies to ensure they continue to protect the public’s health.
Aruba: Regulatory Compliance and Safety Information Guide (AP-320)
RF Radiation Exposure Statement: This equipment complies with FCC RF radiation exposure limits. This equipment should be installed and operated with a minimum distance of 7.87 inches (20cm) between the radiator and your body for 2.4 GHz and 5 GHz operations.
Aruba: HPE Safety and Compliance Information Guide
Exposure to Radio Frequency Radiation: The radiated output power of this device is below the FCC radio exposure limits. Nevertheless, the device should be used in such a manner that the potential for human contact during normal operation is minimized. To avoid the possibility of exceeding the FCC radio frequency exposure limits, human proximity to the antennas should not be less than 20 cm (8 inches) during normal operation.
There is always a possibility that the organisations referenced above will adopt new testing or theories which bring a different perspective. I recommend you stay informed and periodically review the information available. If you do find what I've shared here useful please let me know with a comment below.
Written by Matt Sutherland
Wireshark is super powerful! You just need to learn how to increase your chances of finding needles in haystacks. Needles are the packets and frames which hold the forensic truth of what actually happened, the haystack is the rest of the junk packets and frames that usually get scooped up in the process of the capture. Here are a couple of easy steps to filter both in detail and visually for some interesting types of packets.
Filtering for ARP frames in Wireshark is simple. For an existing packet capture just type arp and hit enter/return in the display filter bar. The corresponding packets will show only ones with the protocol type of ARP. to edit.
Filtering for MDNS is equally as simple. In the display filter bar you can type mdns which will filter the displayed packets to those that match the protocol of MDNS.
If you would like to isolate to Apple Bonjour specifically you can write a display filter for packets with a destination IP address of 22.214.171.124 as displayed below.
Once we know how to display specific types of packets in Wireshark we can display those packets in graphs and see their relation to each other. I really like using the I/O Graph function of Wireshark to see the relative percentage of ARP or MDNS packets to the total number of packets in a visual way.
To get to the I/O Graph click on Statistics in the Menu bar and find I/O Graph.
Typically the I/O Graph will open displaying a line graph which represents the packets per second over time like below:
By including extra details using the display filters previously mentioned you can get a visual representation of the number of ARP packets vs the total number of packets per second.
On a quiet network (overnight when no one is around) the ARP protocol might be pretty much the only type of traffic present as devices keep their ARP tables up to date. But during the day you don't want ARP to be a huge percentage of traffic on your main client network segment - this might indicate an issue which would need to be further investigated. To differentiate between the quiet and busy times on your network it is worth taking some sample captures from various points on the network and analysing the packets per second to see what is 'expected' or 'normal'. The more you look at it the more understanding you will get for the norms in your environment.
To include this you simply add an additional graph detail by clicking the Plus button below the graph details pane and entering a new display filter with a customised name:
Be sure to colour your new line in a different colour so you can easily see the difference between it and other lines on the graph. Wireshark can be used in the same way for 802.11 frame captures. For example you might be able to display broadcast frames vs total frames per second within the I/O Graph, or maybe visualise management and control frames vs data frames. As you learn more display filters the I/O Graph function of Wireshark can become very powerful.
Today my Ubertooth One arrived. I ordered this for a couple of reasons… but the main, pressing reason was I wanted to better understand Bluetooth Beacons and I need a way to packet capture in a promiscuous mode much like I can with WiFi. It seems that the Ubertooth One is the simplest and cheapest solution available - from what I found ultimately it was the only option.
The Ubertooth One was created by Michael Ossmann and Dominic Spill from Great Scott Gadgets.
There are a lot of instructions available… and as long as this isn’t your first time using the make command (http://linoxide.com/how-tos/linux-make-command-examples/) and you aren’t scared to type a few commands in to a terminal, command only, window then getting started isn’t too much work. If you aren’t a programmer then having some experience and patience in searching the Internet for answers then give it a go. There are some dependencies and I found this was the best place to get started: https://github.com/greatscottgadgets/ubertooth/wiki/Getting-Started but there are many other websites you will visit in the initial stages of getting your Ubertooth One going.
I had to compile the firmware as the ready to go package was considered old for the host tools. https://github.com/greatscottgadgets/ubertooth/wiki/Firmware I found this out, because someone else had the issue: https://github.com/greatscottgadgets/ubertooth/issues/228
I used the latest GNU-ARM-Embedded toolchain https://developer.arm.com/open-source/gnu-toolchain/gnu-rm/downloads rather than the older one that was linked to elsewhere. Maybe this was good, maybe bad… It works!
Here was a great piece of learning…
Bluetooth packets start with a code that is based on the Lower Address Part (LAP) of a particular Bluetooth Device Address (BD_ADDR). The BD_ADDR is a 48 bit MAC address, just like the MAC address of an Ethernet device. The LAP consists of the lower 24 bits of the BD_ADDR and is the only part of the address that is transmitted with every packet.
I was able to sniff these LAP’s simply with the Ubertooth One as soon as firmware was flashed and libraries and host tools installed.
Simply capturing Bluetooth in Wireshark https://github.com/greatscottgadgets/ubertooth/wiki/Capturing-BLE-in-Wireshark
But the info didn’t contain what I was expecting…
And then I found this… https://github.com/greatscottgadgets/libbtbb/issues/14
I need to compile some plugins for Wireshark so that it can decode the data coming from the Ubertooth correctly. It looks like there is a Mac OS bug.
Next Stop Linux… More to come.
Interesting reading and watching:
Ubertooth Getting Started: https://github.com/greatscottgadgets/ubertooth/wiki/Getting-Started
So you want to track people with Ubertooth: http://ubertooth.blogspot.com.au/2012/11/so-you-want-to-track-people-with.html
I highly recommend watching this youtube video where Michael Ossmann discusses the difficulties of Bluetooth capture and more https://www.youtube.com/watch?v=KSd_1FE6z4Y
Where to buy:
https://www.ozhack.com/shop/bluetooth/ubertooth-one/ - For the Australian's
https://greatscottgadgets.com/ubertoothone/ - for a whole range of international resellers
Written by Matt Sutherland
We build and optimise networks. Continuous learning is our secret to being good. Along the learning journey we will share things here...