I too have been unsuccessful in getting Ethereal to present decrypted 802.11 frames when given the correct WEP key information. I haven't tracked down why it's not working yet, but I did find a workaround by using the "decrypt" tool that comes with the AirSnort program. Run your libpcap file through decrypt with the appropriate key, then load it up in Ethereal. Tell Ethereal to ignore the WEP bit to get it to decode properly, as AirSnort's decrypt leaves that bit set in the output libpcap file.
-Joshua Wright
Senior Network and Security Architect
Johnson & Wales University
Joshua.Wright@xxxxxxx
http://home.jwu.edu/jwright/
pgpkey: http://home.jwu.edu/jwright/pgpkey.htm
fingerprint: FDA5 12FC F391 3740 E0AE BDB6 8FE2 FC0A D44B 4A73
> -----Original Message-----
> From: ethereal-users-bounces@xxxxxxxxxxxx
> [mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of
> Habib Ben Abid
> Sent: Wednesday, June 11, 2003 7:48 PM
> To: ethereal-users@xxxxxxxxxxxx
> Subject: [Ethereal-users] decrypting wireless frames
>
>
>
> Hello ,
> I have been trying to decrypt the wireless frames using the wep key by
> ethereal. But it was unsuccessful.
> Has anyone been able to do it.
> Any help would be welcome.
> Thank you very much.
> Hbib
>
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>