Click to See Complete Forum and Search --> : How does stumblers get weak IV's ????


lostbread@free.
08-17-2007, 05:12 AM
Hi, I have got a question, about how stumblers like Kismet or KisMAC work ???

They manage to get weak IV's in passive scanning mode, but what I don't understand, is that in passive mode, you only can hear to beacon frames, wich are not encoded by WEP, so they don't include IV in their header !!!

It means that they also manage to get frames encoded by WEP, which are generally Unicast frames, i.e. destinated to a unique MAC adress, am I wrong ?

Does someone here understand How it works ?

M/Q
08-18-2007, 08:05 AM
If the wireless adapter is truly placed in promiscuous or passive mode, the application will be able to retrieve all packets being sent, not just the beacon packets.