Hi All, Quick disclosure point: I work for AirMagnet so, of course, consider my comments as biased. But to answer your question, from my experience I don't know of a way to distinguish WPA from WEP from a single packet. The way that you will distinguish them is that if a device is using WPA, there is a 4-way handshake that occurs AFTER the authentication. Our analyzer is automatically looking for that handshake (so you don't have to dig through the decode unless you really want to). We will also identify other security measures including WEP, 802.1x and all the associated EAP types (LEAP, PEAP, FAST), TKIP, MIC, as well as WPA. Check out our demo if you want to see more (http://www.airmagnet.com/products/laptop.htm)
-Wade Williamson -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Timolthy Keithy Sent: Friday, October 15, 2004 1:42 AM To: [EMAIL PROTECTED] Subject: [BAWUG] WEP and WPA How can we know or is there a way to identify if the packet is encrypted with WEP or WPA (EAP or PEAP)? even using the Airopeek to sniff (normally, it shows WEP encrypted whether it's WEP or WPA). Timolthy __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ BAWUG's general wireless chat mailing list [unsubscribe] http://lists.bawug.org/mailman/listinfo/wireless _______________________________________________ BAWUG's general wireless chat mailing list [unsubscribe] http://lists.bawug.org/mailman/listinfo/wireless
