Ethereal-users: Re: [Ethereal-users] Tree display change

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: joe@xxxxxxxx (Joe Tomasone)
Date: Fri, 22 Jun 2001 18:25:00 -0400
At 05:50 PM 6/22/2001, you wrote:
I.e., the network interface is handing encrypted data to the host?  Does
this mean that the driver must decrypt the data, or does it mean that
the interface hands to the host both raw un-encrypted data *and*
decrypted data, or does it mean that while you're running in that mode
you can sniff the network but you can't process traffic from it?


The client and AP work fine, and are happily transmitting away.

Meanwhile, on the sniffer, I get 802.11 data frames with
plaintext headers, as expected.  However, the Frame Control
Privacy bit is set to 0.  The data payload of an HTTP packet
consisting of text is unreadable, and apparently WEP encrypted.

However, they are displayed by Ethereal as straight LLC frames,
since the WEP bit is set to zero.

        - Joe