Wireshark presents each of the EAPOL messages with "(Message 1 of 4)" then 2 of 4, 3 of 4, and finally 4 of 4. This information appears in the "Info" column within Wireshark. From the packet data, I'd like to know how to make the same distinction for each of the 4 EAPOL packets that Wireshark does. Thanks! asked 18 May '14, 17:49  SwiftAero |
One Answer:
These info's come from the WPA key dissection in packet-ieee80211.c. Have a look at answered 24 May '14, 06:43  Jaap ♦ |
