This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Malformed Packet (no3 of 4-way-handshake)

0

Hello,

Since last week I’ve been trying to capture the 4-way-handshake of my own router without success. I tried on different PCs, on different distances to the router, even on different routers, and I even ordered an additional wifi-card that was recommended for use with backtrack. The result is always the same. In Wireshark:

In the top section it always shows that exactly 1 or 4, 2 of 4 and 4 of 4 are malformed and always exactly on 3 of 4 it does not show this message. But when I click on 3 of 4 in the top section, on the bottom of the middle section it also ends up telling, that the packet is malformed. This is always the case, whatever I do:

2385, 19.882257, D-Link_18:af:68, AskeyCom_f4:ee:36, EAPOL, 131, Key (Message 1 of 4)[Malformed Packet] 2387, 19.883838, AskeyCom_f4:ee:36, D-Link_18:af:68, EAPOL, 155, Key (Message 2 of 4)[Malformed Packet] 7033, 34.142877, D-Link_18:af:68, AsustekC_2f:93:df, EAPOL, 235, Key (Message 3 of 4)* 2771, 21.117310, AskeyCom_f4:ee:36, D-Link_18:af:68, EAPOL, 133, Key (Message 4 of 4)[Malformed Packet]

  • Frame 7033: 235 bytes on wire (1880 bits), 235 bytes captured (1880 bits) IEEE 802.11 Data, Flags: ......F.. Logical-Link Control 802.1X Authentication [Malformed Packet: EAPOL]

I hope anybody can help!

asked 27 Mar '13, 12:54

Markey's gravatar image

Markey
1111
accept rate: 0%

Noone has a clue?

(03 Apr '13, 13:25) Markey