Ticket #425 (new defect)
Airdecap-ng molestes decrypted packets
| Reported by: | Zero_Chaos | Owned by: | |
|---|---|---|---|
| Priority: | major | Milestone: | 1.3 |
| Component: | airdecap-ng | Version: | 1.0-dev |
| Keywords: | Cc: |
Description
When -l (keep 802.11 headers) is passed to airdecap-ng the packets that decrypted have the wep information removed. The proper behavior would be only to decrypt the data and leave the entire rest of the packet alone. Information such as WEP key index, WEP IV, and WEP ICV should not be stripped from the packet as this could be desired information. No other changes (including removing the privacy bit) should be performed as wireshark is smart enough to decipher the packet as decrypted even though the privacy bit may remain set.
-ZC
Attachments
Change History
Note: See
TracTickets for help on using
tickets.
