Wireshark · Ethereal-dev: Re: [Ethereal-dev] [PATCH] updated 802.11 dissector

["Ronnie Sahlberg" <sahlberg@xxxxxxxxxxxxxxxx>]

I could be wrong but I belive the WEP encryption is done on a per-frame
basis
(since the ISV is different for each fragment)
Thus I think the dissector must be changed to do the decryption before
reassembly of the fragments.


----- Original Message -----
From: "Guy Harris"
Sent: Tuesday, June 18, 2002 6:41 PM
Subject: Re: [Ethereal-dev] [PATCH] updated 802.11 dissector


> On Mon, Jun 17, 2002 at 04:15:43PM -0400, Solomon Peachy wrote:
> > Version four of the patch is up at the usual place.
>
> Checked in, with some cleanups of the code to handle short frames, and
> with the WEP ICV universally named an "ICV" rather than a "CRC" (e.g.,
> changing the filterable field name).
>
> BTW, is WEP encryption done *before* fragmentation or *after*
> fragmentation?
>
> I.e., if a frame is handed to an 802.11 interface, and the interface
>
> 1) is using WEP
>
> and
>
> 2) chooses to fragment the packet
>
> does it WEP-encrypt the payload and then fragment it, or does it
> fragment the payload and then WEP-encrypt each fragment?  The current
> code does WEP decryption after defragmentation, which works if it
> WEP-encrypts the payload and then fragments it.
>
> _______________________________________________
> Ethereal-dev mailing list
> Ethereal-dev@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-dev