Wireshark-bugs: [Wireshark-bugs] [Bug 12024] IEEE802.11 FCS issue preventing WPA decryption
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Wed, 10 Feb 2016 22:52:36 +0000

changed bug 12024


What Removed Added
CC   alexander.wetzel@web.de

Comment # 1 on bug 12024 from 
Still looking at that, but I see no way a wrong FCS could break the decode.
I've even edited the capture and broken the FCS for one of the working frames
and decode is still working as expected.

I also removed the check if a packet was decrypted successful and then it's
decodes to garbage.

So for me it looks like the packets from the AP are somehow all scrambled,
explaining the incorrect FCS. But for some reason quite some bytes at the
beginning are ok. 

Since a normal client would discard a packet with a broken FCS the obvious
conclusion is, that there must be something wrong with the sniffer, since you
observe no problems on the client.

Do you have some more details how exactly you have captured the frames?
Operating system, wlan card and commands used to get into the monitor mode
could be interesting. If possible try to use another sniffer. I had quite good
results with Linux and Intel Wlan cards (Centrino Ultimate-N 6300) so far, but
then I only have two systems to base my experience on...

You are receiving this mail because:
  • You are watching all bug changes.