Wireshark-bugs: [Wireshark-bugs] [Bug 2804] most capture filters are inoperative when sniffing w
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 15 Apr 2010 14:51:00 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=2804

Guy Harris <guy@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
           Platform|x86                         |All
         OS/Version|Ubuntu                      |All

--- Comment #3 from Guy Harris <guy@xxxxxxxxxxxx> 2010-04-15 14:48:40 PDT ---
The problem here is that libpcap/WinPcap - and the kernel mechanisms atop which
they run - don't decrypt WEP/WPA/WPA2 packets received promiscuously/in monitor
mode, so they can't filter on any of the encrypted part of the payload; in
order to implement this, the filtering would have to be done after decryption,
which means "not in *pcap".

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.