Advertisement

04.11.2005 at 04:01PM PDT, ID: 21384938
[x]
Attachment Details

Cracking WEP using pcap-getIV.pl - Datalinktype not supported error

Asked by Excalibur81 in Apple Networking

Tags: dlt, type, unsupported

Hi all,

Im trying to run some of the well known wep cracking algorithms on my home wep network.

Currently, im running tcpdump to dump packet data from my airport express to a file packets.pcap using the following command:

tcpdump -w packets.pcap -i 'en1' -y EN10MB

I then run pcap-getIV.pl to extract weak IV's from the captured data using:

perl pcap-getIV.pl -f packets.pcap -b 13

However, this returns the error:

DLT = 1: unsupported DLT type at pcap-getIV.pl line 190.

The pcap-getIV.pl file will accept only 2 datalink types, either IEEE802_11 or Prism 2:

if ($dlt eq 105) {
      print("DLT_IEEE802_11 (0byte Offset)\n");
      $offset=0;
} elsif ($dlt eq 119) {
      print("Prism2 Header (144byte Offset)\n");
      $offset=144;
} else {
      die("unsupported DLT type");
}

However, when i try to run tcpdump with the datalinktype as IEEE802 i get the error:
tcpdump: IEEE802 is not one of the DLTs supported by this device


How can i dump packets using the supported datalink types of the pcap-getIV.pl script?

Surely Airport Express supports IEEE802 !!!

Regards,
-Rob-Start Free Trial
 
Keywords: Cracking WEP using pcap-getIV.pl -…
 
Loading Advertisement...
 
[+][-]05.03.2005 at 05:59AM PDT, ID: 13917249

View this solution now by starting your 7-day free trial. Setting up your free trial is quick, easy, and secure. We will return you to this solution, unlocked, when you're done.

 

About this solution

Zone: Apple Networking
Tags: dlt, type, unsupported
Sign Up Now!
Solution Provided By: fixnix
Participating Experts: 1
Solution Grade: A
 
 
[+][-]07.01.2005 at 12:51AM PDT, ID: 14345242

Experts Exchange has a courteous staff of administrators who help members get the most out of the website by means of administrative comments like this one.

Start your 7-day free trial to view this Administrative Comment or ask the Experts your question.

 
[+][-]07.05.2005 at 02:28AM PDT, ID: 14367032

Experts Exchange has a courteous staff of administrators who help members get the most out of the website by means of administrative comments like this one.

Start your 7-day free trial to view this Administrative Comment or ask the Experts your question.

 
 
Loading Advertisement...
20080716-EE-VQP-32