Display Filter Reference: 802.1X Authentication

Protocol field name: eapol

Versions: 1.0.0 to 2.0.1

Back to Display Filter Reference

Field name Description Type Versions
eapol.keydes.body Key Descriptor Body Sequence of bytes 1.12.0 to 2.0.1
eapol.keydes.data WPA Key Data Sequence of bytes 1.0.0 to 1.10.14
eapol.keydes.data_len WPA Key Data Length Unsigned integer, 2 bytes 1.8.0 to 1.10.14
eapol.keydes.datalen WPA Key Length Unsigned integer, 2 bytes 1.0.0 to 1.6.16
eapol.keydes.id WPA Key ID Sequence of bytes 1.0.0 to 1.10.14
eapol.keydes.index.indexnum Index Number Unsigned integer, 1 byte 1.0.0 to 1.6.16
eapol.keydes.index.keytype Key Type Boolean 1.0.0 to 1.6.16
eapol.keydes.key Key Sequence of bytes 1.0.0 to 2.0.1
eapol.keydes.key.generated_locally Key Generated Locally Boolean 1.8.0 to 2.0.1
eapol.keydes.key_index Key Index Unsigned integer, 1 byte 1.8.0 to 2.0.1
eapol.keydes.key_index.number Number Unsigned integer, 1 byte 1.8.0 to 2.0.1
eapol.keydes.key_index.type Type Boolean 1.8.0 to 2.0.1
eapol.keydes.key_info Key Information Unsigned integer, 2 bytes 1.0.0 to 1.10.14
eapol.keydes.key_info.encr_key_data Encrypted Key Data flag Boolean 1.0.0 to 1.6.16
eapol.keydes.key_info.encrypted_key_data Encrypted Key Data Boolean 1.8.0 to 1.10.14
eapol.keydes.key_info.error Error Boolean 1.0.0 to 1.10.14
eapol.keydes.key_info.install Install Boolean 1.0.0 to 1.10.14
eapol.keydes.key_info.key_ack Key ACK Boolean 1.0.0 to 1.10.14
eapol.keydes.key_info.key_index Key Index Unsigned integer, 2 bytes 1.0.0 to 1.10.14
eapol.keydes.key_info.key_mic Key MIC Boolean 1.0.0 to 1.10.14
eapol.keydes.key_info.key_type Key Type Boolean 1.0.0 to 1.10.14
eapol.keydes.key_info.keydes_ver Key Descriptor Version Unsigned integer, 2 bytes 1.0.0 to 1.6.16
eapol.keydes.key_info.keydes_version Key Descriptor Version Unsigned integer, 2 bytes 1.8.0 to 1.10.14
eapol.keydes.key_info.request Request Boolean 1.0.0 to 1.10.14
eapol.keydes.key_info.secure Secure Boolean 1.0.0 to 1.10.14
eapol.keydes.key_iv Key IV Sequence of bytes 1.0.0 to 2.0.1
eapol.keydes.key_len Key Length Unsigned integer, 2 bytes 1.8.0 to 2.0.1
eapol.keydes.key_signature Key Signature Sequence of bytes 1.0.0 to 2.0.1
eapol.keydes.keylen Key Length Unsigned integer, 2 bytes 1.0.0 to 1.6.16
eapol.keydes.mic WPA Key MIC Sequence of bytes 1.0.0 to 1.10.14
eapol.keydes.nonce WPA Key Nonce Sequence of bytes 1.0.0 to 1.10.14
eapol.keydes.replay_counter Replay Counter Unsigned integer, 8 bytes 1.0.0 to 2.0.1
eapol.keydes.rsc WPA Key RSC Sequence of bytes 1.0.0 to 1.10.14
eapol.keydes.type Key Descriptor Type Unsigned integer, 1 byte 1.0.0 to 2.0.1
eapol.len Length Unsigned integer, 2 bytes 1.0.0 to 2.0.1
eapol.type Type Unsigned integer, 1 byte 1.0.0 to 2.0.1
eapol.version Version Unsigned integer, 1 byte 1.0.0 to 2.0.1
Go Beyond with Riverbed Technology

Riverbed is Wireshark's primary sponsor and provides our funding. They also make great products.

I have a lot of traffic...

ANSWER: SteelCentral™ Packet Analyzer PE $29.95/yr
  • • Visually rich, powerful LAN analyzer
  • • Quickly access very large pcap files
  • • Professional, customizable reports
  • • Advanced triggers and alerts
  • • Fully integrated with Wireshark and AirPcap™
Buy $29.95 Annual Subscription Now

No, really, I have a LOT of traffic…

ANSWER: SteelCentral™ NetShark appliance
  • • Troubleshoot problems faster
  • • Quickly identify the applications running on your network
  • • Monitor your virtual machine traffic
Learn More

I need to capture wireless traffic...

ANSWER: AirPcap™ 802.11 Packet Capture
  • • WLAN packet capture and transmission
  • • Full 802.11 a/b/g/n support
  • • View management, control and data frames
  • • Multi-channel aggregation (with multiple adapters)
Learn More Buy Now