ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: [Wireshark-dev] How to recognize TKIP

From: "Davide Schiera" <davide.schiera@xxxxxxxxx>
Date: Tue, 28 Nov 2006 21:21:30 +0100
Hi developers,
I've a question about how Wireshark is able to recognize a TKIP mpdu.

In the dissector there is this control (where tvb(hdr_len+1)==WEPSeed):
if (tvb_get_guint8(tvb, hdr_len + 1) & 0x20) {
   /* TKIP MPDU */
}

In the 802.11i-2004 it's said (speaking about TKIP MPDU format):
"WEPSeed[1] is not used to construct the TSC, but is set to (TSC1 | 0x20) &
0x7f."

Are these two methods actually the same?

Thanks,


Davide