Wireshark-users: Re: [Wireshark-users] IEEE 802.11 wpa-pwd seems to break if I add a time reference (using 0.99.6)

From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Thu, 06 Dec 2007 16:47:39 -0800

Jeff Clemmer wrote:
> Hello,
> 
> I'm using wireshark version 0.99.6, sniffing WLAN on linux.  I noticed
> if I set a relative time reference on a packet, the decryption of wpa
> (using the wpa-pwd option in Key #1) seems to break.  If I reload the
> file (so that the reference is gone), the decryption works again.
> 
> Is this a known issue, or am I doing something wrong?

The 802.11 dissector and the decryption code don't make any use of packet
timestamps, so setting a reference shouldn't make any difference. I can't
duplicate the problem on Linux using the latest sources, so you might try
upgrading to 0.99.7 when it comes out.