PMK Cache/List (PMKID)

#1 (**permalink**) 09-04-2007, 02:21 PM

Hi all,

I am looking for a way for the AP to send PMKID in RSN.
I see that the RSN includes all the information (EID=48,
Version=1,...RSN Capabilities), but in some reason, PMKID and PMK
List
is missing.

My setup includes AP connected to Radius server (windows server
2003).
I understand that the PMKID should be seen in Beacon and Probe req
packets. What should I do in order to see the PMKID?

Thanks.

#2 (**permalink**) 09-04-2007, 02:57 PM

<Eran.Yasso@gmail.com> wrote in message
news:1188915685.533655.310270@g4g2000hsf.googlegro ups.com...
> Hi all,
>
> I am looking for a way for the AP to send PMKID in RSN.
> I see that the RSN includes all the information (EID=48,
> Version=1,...RSN Capabilities), but in some reason, PMKID and PMK
> List
> is missing.
>
>
> My setup includes AP connected to Radius server (windows server
> 2003).
> I understand that the PMKID should be seen in Beacon and Probe req
> packets. What should I do in order to see the PMKID?

What are you using
>
>
> Thanks.
>

#3 (**permalink**) 09-04-2007, 03:32 PM

On Sep 4, 5:57 pm, "Dana" <raff...@yahoo.com> wrote:
> <Eran.Ya...@gmail.com> wrote in message
>
> news:1188915685.533655.310270@g4g2000hsf.googlegro ups.com...
>
> > Hi all,
>
> > I am looking for a way for the AP to send PMKID in RSN.
> > I see that the RSN includes all the information (EID=48,
> > Version=1,...RSN Capabilities), but in some reason, PMKID and PMK
> > List
> > is missing.
>
> > My setup includes AP connected to Radius server (windows server
> > 2003).
> > I understand that the PMKID should be seen in Beacon and Probe req
> > packets. What should I do in order to see the PMKID?
>
> What are you using
>
>
>
>
>
> > Thanks.- Hide quoted text -
>
> - Show quoted text -

Hi,

What do you mean what I am using? OmniPeek (http://www.wildpackets.com/
products/overview)

#4 (**permalink**) 09-04-2007, 03:39 PM

<Eran.Yasso@gmail.com> wrote in message
news:1188919969.533805.295960@y42g2000hsy.googlegr oups.com...
> On Sep 4, 5:57 pm, "Dana" <raff...@yahoo.com> wrote:
>> <Eran.Ya...@gmail.com> wrote in message
>>
>> news:1188915685.533655.310270@g4g2000hsf.googlegro ups.com...
>>
>> > Hi all,
>>
>> > I am looking for a way for the AP to send PMKID in RSN.
>> > I see that the RSN includes all the information (EID=48,
>> > Version=1,...RSN Capabilities), but in some reason, PMKID and PMK
>> > List
>> > is missing.
>>
>> > My setup includes AP connected to Radius server (windows server
>> > 2003).
>> > I understand that the PMKID should be seen in Beacon and Probe req
>> > packets. What should I do in order to see the PMKID?
>>
>> What are you using
>>
>>
>>
>>
>>
>> > Thanks.- Hide quoted text -
>>
>> - Show quoted text -
>
> Hi,
>
> What do you mean what I am using? OmniPeek (http://www.wildpackets.com/
> products/overview)

Because awhile back Ethereal (wireshark) needed a patch.

>

#5 (**permalink**) 09-05-2007, 05:25 AM

On Sep 4, 6:39 pm, "Dana" <raff...@yahoo.com> wrote:
> <Eran.Ya...@gmail.com> wrote in message
>
> news:1188919969.533805.295960@y42g2000hsy.googlegr oups.com...
>
>
>
>
>
> > On Sep 4, 5:57 pm, "Dana" <raff...@yahoo.com> wrote:
> >> <Eran.Ya...@gmail.com> wrote in message
>
> >>news:1188915685.533655.310270@g4g2000hsf.googleg roups.com...
>
> >> > Hi all,
>
> >> > I am looking for a way for the AP to send PMKID in RSN.
> >> > I see that the RSN includes all the information (EID=48,
> >> > Version=1,...RSN Capabilities), but in some reason, PMKID and PMK
> >> > List
> >> > is missing.
>
> >> > My setup includes AP connected to Radius server (windows server
> >> > 2003).
> >> > I understand that the PMKID should be seen in Beacon and Probe req
> >> > packets. What should I do in order to see the PMKID?
>
> >> What are you using
>
> >> > Thanks.- Hide quoted text -
>
> >> - Show quoted text -
>
> > Hi,
>
> > What do you mean what I am using? OmniPeek (http://www.wildpackets.com/
> > products/overview)
>
> Because awhile back Ethereal (wireshark) needed a patch.
>
>
>
> - Hide quoted text -
>
> - Show quoted text -- Hide quoted text -
>
> - Show quoted text -

Is it something that WLAN sniffer (OmniPeek) can't see? Only Ethereal?

#6 (**permalink**) 09-05-2007, 06:52 PM

<Eran.Yasso@gmail.com> wrote in message
news:1188969909.009387.237570@k79g2000hse.googlegr oups.com...
> On Sep 4, 6:39 pm, "Dana" <raff...@yahoo.com> wrote:
>> <Eran.Ya...@gmail.com> wrote in message
>>
>> news:1188919969.533805.295960@y42g2000hsy.googlegr oups.com...
>>
>>
>>
>>
>>
>> > On Sep 4, 5:57 pm, "Dana" <raff...@yahoo.com> wrote:
>> >> <Eran.Ya...@gmail.com> wrote in message
>>
>> >>news:1188915685.533655.310270@g4g2000hsf.googleg roups.com...
>>
>> >> > Hi all,
>>
>> >> > I am looking for a way for the AP to send PMKID in RSN.
>> >> > I see that the RSN includes all the information (EID=48,
>> >> > Version=1,...RSN Capabilities), but in some reason, PMKID and PMK
>> >> > List
>> >> > is missing.
>>
>> >> > My setup includes AP connected to Radius server (windows server
>> >> > 2003).
>> >> > I understand that the PMKID should be seen in Beacon and Probe req
>> >> > packets. What should I do in order to see the PMKID?
>>
>> >> What are you using
>>
>> >> > Thanks.- Hide quoted text -
>>
>> >> - Show quoted text -
>>
>> > Hi,
>>
>> > What do you mean what I am using? OmniPeek (http://www.wildpackets.com/
>> > products/overview)
>>
>> Because awhile back Ethereal (wireshark) needed a patch.
>>
>>
>>
>> - Hide quoted text -
>>
>> - Show quoted text -- Hide quoted text -
>>
>> - Show quoted text -
>
> Is it something that WLAN sniffer (OmniPeek) can't see? Only Ethereal?

No.
Omnnipeek states it can see the info you are looking for.
>