["Jon Baer" <ethereal@xxxxxxxxxxx>]

the only real way to do this that i know of is to use a kismet setup to view
the raw packets in monitor mode from ur ssid ...

otherwise normally you can use netstumbler to view ur ap to detect if the
beacon shows + is reporting that wep is enabled ...

www.netstumbler.com

- jon

----- Original Message -----
From: "Mike Shepet" <mike@xxxxxxxx>
To: <ethereal-users@xxxxxxxxxxxx>
Sent: Sunday, August 31, 2003 2:40 PM
Subject: [Ethereal-users] Sniff wireless on the same machine?


> I am not 100% confident that my WLAN is speaking WEP.  My setup is pretty
> simple, a laptop running Windows XP with a D-Link 802.11b card and a
> netgear wireless broadband router.  Both the AP and wireless network
> properties in XP are configured to use encryption.  This afternoon I was
> digging through the Device Manager properties of the wireless NIC and
> found a property under the Advanced tab that read "WEP Option" set to
> disabled.  Curious, I installed Ethereal and started capturing packets
> and found that all of my traffic was in clear text.  I set that property
> to enabled and rebooted, but it's still capturing in clear text.
>
> Is it showing clear text because the packets are being decrypted before
> Ethereal has a chance to read them?  How could you find out for sure if
> WEB is enabled if all you have is an AP and one client?
>
> Mike
>
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
>