I too have been unsuccessful in getting Ethereal to present decrypted 802.11 frames when given the correct WEP key information. I haven't tracked down why it's not working yet, but I did find a workaround by using the "decrypt" tool that comes with the AirSnort program. Run your libpcap file through decrypt with the appropriate key, then load it up in Ethereal. Tell Ethereal to ignore the WEP bit to get it to decode properly, as AirSnort's decrypt leaves that bit set in the output libpcap file.
-Joshua Wright Senior Network and Security Architect Johnson & Wales University [EMAIL PROTECTED] http://home.jwu.edu/jwright/ pgpkey: http://home.jwu.edu/jwright/pgpkey.htm fingerprint: FDA5 12FC F391 3740 E0AE BDB6 8FE2 FC0A D44B 4A73 > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > Habib Ben Abid > Sent: Wednesday, June 11, 2003 7:48 PM > To: [EMAIL PROTECTED] > Subject: [Ethereal-users] decrypting wireless frames > > > > Hello , > I have been trying to decrypt the wireless frames using the wep key by > ethereal. But it was unsuccessful. > Has anyone been able to do it. > Any help would be welcome. > Thank you very much. > Hbib > > > _______________________________________________ > Ethereal-users mailing list > [EMAIL PROTECTED] > http://www.ethereal.com/mailman/listinfo/ethereal-users >
