Wireshark mailing list archives

Have problem where one capture with EAPOL decrypts OK but another does not


From: Richard Sharpe <realrichardsharpe () gmail com>
Date: Tue, 7 Nov 2017 03:58:08 -0800

Hi folks,

I have a pair of captures with EAPOL, each with four key exchanges.

In the first, when I enter the appropriate WPS-PWD info, one decrypts
OK, the other doesn't.

The only interesting thing I can see for the one that doesn't decrypt
is that one of key exchanges is a retransmit.

Has anyone seen this?

Also, where is the key info assembled in the dissector? I have not yet
understood where in the code this is being done.

-- 
Regards,
Richard Sharpe
(何以解憂?唯有杜康。--曹操)
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://www.wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe

Current thread: