Menu

#3 WEP detection

closed
nobody
None
5
2001-11-22
2001-10-11
X
No

<p>capture detects an encrypted packet by comparing
byte 168 with 0xAA.</p>

<p>Shouldn't this be detected by looking at the WEP
bit? (packet[145]&0x40)</p>

Mahlzeit

Discussion

  • Michael Jarrett

    Michael Jarrett - 2001-10-31

    Logged In: YES
    user_id=38256

    No.

    The Prism firmware (or perhaps the driver) strips the WEP
    bit off, so it is not present in the data even if it was
    sent over the air. Look at prismdump's data in ethereal and
    you will see what I mean.

    Developer able to close this bug?

     
  • Joe Weiss

    Joe Weiss - 2001-11-22
    • status: open --> closed
     

Log in to post a comment.