Re: [gentoo-user] Can't Decrypt WEP Packets After Upgrade From 2.6.23 to 2.6.25

[Mick]

On Tuesday 03 June 2008, Drew Tomlinson wrote:
> Ever since I upgraded my gentoo-sources kernel from 2.6.23 to 2.6.25, I
> can no longer see packets on my wireless network for any device other
> than my own.  The tcpdump output looks like this:
>
> 20:49:32.909144 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Unnumbered, disc,
> Flags [Final], length 44
> 20:49:32.912775 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Information, send seq
> 42, rcv seq 0, Flags [Response], length 204
> 20:49:32.916874 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Supervisory, Receiver
> not Ready, rcv seq 0, Flags [Response], length 169
> 20:49:32.976738 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Information, send seq
> 43, rcv seq 0, Flags [Response], length 64
> 20:49:33.047570 00:12:bf:2a:2c:76 (oui Unknown) > 00:1f:32:5f:fe:06 (oui
> Unknown), ethertype Unknown (0x05ec), length 1530:
>     0x0000:  c211 5700 c393 1b7b 838f 366c 27c5 f97a  ..W....{..6l'..z
>     0x0010:  5111 7d1a 1e33 bebd a432 ff30 5a35 e0ad  Q.}..3...2.0Z5..
>     0x0020:  ba16 2b31 f1e9 d905 5967 f333 d3a1 4ba3  ..+1....Yg.3..K.
>     0x0030:  1e32 0f18 fcc2
>
> I've Googled for an answer and think that my problem is that I am unable
> to decrypt WEP packets for any device other than my own.  This is a
> simple 64 bit WEP network in my home.  Unfortunately I did not find
> anything that applied to my situation.
>
> One thing different about my new kernel config is that because I have a
> Broadcom card, I moved to the new b43 driver instead of the old
> b43_legacy driver.  I am using version 4 firmware however I had the same
> problem with version 3 firmware.  I was hoping that would fix it but no
> luck.
>
> I am also using the new MAC80211 stack instead of the older IEEE80211
> stack.
>
> Any ideas on what I have done wrong?

How do you invoke tcpdump?  Are you placing your interface in promiscuous 
mode?  If you iface is 00:12:bf:2a:2c:76 which one is 00:1f:32:5f:fe:06 ?  
The router?  Does setting -s 65535 provide more packet info?
-- 
Regards,
Mick