Ticket #425 (new defect)

Opened 22 months ago

Airdecap-ng molestes decrypted packets

Reported by: Zero_Chaos Owned by:
Priority: major Milestone: 1.1
Component: airdecap-ng Version: 1.0-dev
Keywords: Cc:

Description

When -l (keep 802.11 headers) is passed to airdecap-ng the packets that decrypted have the wep information removed. The proper behavior would be only to decrypt the data and leave the entire rest of the packet alone. Information such as WEP key index, WEP IV, and WEP ICV should not be stripped from the packet as this could be desired information. No other changes (including removing the privacy bit) should be performed as wireshark is smart enough to decipher the packet as decrypted even though the privacy bit may remain set.

-ZC

Attachments

Add/Change #425 (Airdecap-ng molestes decrypted packets)

Author


E-mail address and user name can be saved in the Preferences.


Action
as new
 
Note: See TracTickets for help on using tickets.