Jeff Clemmer wrote:
> Hello,
>
> I'm using wireshark version 0.99.6, sniffing WLAN on linux. I noticed
> if I set a relative time reference on a packet, the decryption of wpa
> (using the wpa-pwd option in Key #1) seems to break. If I reload the
> file (so that the reference is gone), the decryption works again.
>
> Is this a known issue, or am I doing something wrong?
The 802.11 dissector and the decryption code don't make any use of packet
timestamps, so setting a reference shouldn't make any difference. I can't
duplicate the problem on Linux using the latest sources, so you might try
upgrading to 0.99.7 when it comes out.