Protocol analyzers and TKIP/CCMP
Last Post: May 28, 2010:
-
One last update. By the way, I learned something new today. So, it looks like the hip kids nowadays are using the OUI 00-0F-02. The FCC says this OUI is registered to "IEEE 802.11". I suspect this may be due to the fact that it seems a number of IE's I checked were running the Microsoft OUI. That is pretty funny to see on an EKG cart wireless bridge that is running Linux. Perhaps it is in the clause 8 doc, which I have not read yet. Funny thing though, if you google the address it comes up as Cisco. Just an office building with several tenants. So, to answer your question, I think this is what most tools may be trying to use for identifying the encryption. Regardless of the OUI, the cipher type values seem universal. The OUI's that I have observed seem to belong to Microsoft, IEEE 802.11, or the chip vendor. Sometimes it is all about asking the right question. Can anyone verify what I have posted as correct?
- 1