airsnort(1)
NAME
airsnort - WEP key cracking tool
SYNOPSIS
airsnort
DESCRIPTION
Array(FMS) and first exploited by Stubblefield et al.
- Running AirSnort
Arrayspecific channel. Note that in either case it is quite possible
to receive packets that bleed through from neighboring channels.
- Capture Details
Array- Cracking Details
Arraytic attack, The best guess may not be the right one, so, with
limited captured data and enough CPU power, you can perform more
exaustive searches. By setting the breadth parameter, you can
specify to search "worse" guesses. It is not suggested that you
specify a breadth of more than three or four.
- Save and Restore
Array"Log to file" option from the File menu. This must be done before a capture session is initiated. Airsnort can also save a
much smaller amount of data of data about a capture session in
the form of "crack" files. These files represent the minimum
amount of data that airsnort maintains for each access point that
it discovers. Crack files contain summary data of those packets
that airsnort has seen that actually use weak IVs. Airsnort will
always ask the user to save data to a crack file whenever the
program is terminated. By using save files, airsnort session can
effectively be paused and resumed at a later time by first loading the save file, then starting a capture session. Restoration
of data from a pcap dump file amounts to replaying the entire
capture session from which the dump file was created, all statistics will reflect what was seen during the live capture session.
Restoration of data from a crack file will only display statistics about packets that use weak IVs, thus packet counts are
likely to be much smaller than seen during the live capture. It
is possible to load a pcap dump file and create a corresponding
crack file in order to reduce the amount of stored data.