Comments (3)
guyharris
commented on June 15, 2024
At least as I read sections 11.2.2.2 "WEP MPDU format", the WEP IV is in the first 4 bytes of the payload. 0x03aaaa is the 802.2 header for a SNAP frame, which would be the first 3 bytes of the payload of a non-encrypted field, so what's happening is probably that, because you have the correct WEP key on the card, the adapters are providing decrypted packets, with the IV and ICV removed from the frame. Perhaps it's failing to clear the Protected bit in the Frame Control field; Wireshark has an option to ignore the Protected bit because of that.
There's not much libpcap can do about that.
from libpcap.
infrastation
commented on June 15, 2024
So the issue is not a bug and should be closed?
from libpcap.
guyharris
commented on June 15, 2024
Yup. (Well, if it doesn't clear the Protected bit, maybe you could argue that it's a driver bug or an adapter bug, either that it's decrypting frames in what I assume is monitor mode or that, when it does so, it doesn't clear the Protected bit, but, in either case, it's not a libpcap bug.)
from libpcap.
Related Issues (20)
- Simple filter of 1000 hosts takes O(nĀ²) to compile HOT 3
- libpcap can't read pcapng files with more than one link-layer type HOT 18
- Remove pcap-rpcap-int.h? HOT 2
- Optimizer does not completely remove leading noop statements
- test programs do not work well when the only capture devices are non-network HOT 7
- haiku: Some warning should be fixed HOT 8
- configure:3855: gcc -V >&5 gcc: error: unrecognized command line option '-V' HOT 12
- Can't filter vlan and geneve packet HOT 17
- libpcap can print to standard error under certain conditions HOT 1
- build fails on AIX 7.1 due to thread-local storage HOT 4
- Clang build on OpenIndiana 2023.10 is broken HOT 3
- go RPCAP protocol implementation comparison with the source code here? HOT 7
- SSL support for Windows when compiling libpcap? HOT 2
- ibv_open_device() not called before ibv_free_device_list()? HOT 1
- rpcapd-config additional field additionals for future from examples found online
- Confirmation and clarification of TLS handling and user authentication for rpcap HOT 1
- Does libpcap support writing pcapng format? HOT 2
- disabling NETIF_F_HW_VLAN_CTAG_TX issue HOT 3
- Accessing Decryption Secrets Block (DSB) HOT 2
- libpcap should fully support pcapng files HOT 24
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
š Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. ššš
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ā¤ļø Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from libpcap.