Quote:
|
Originally Posted by kleptophobiac
So, if they are easily indentifiable... do they vary at all from packet to packet? Does an ARP storm really get you any new IV's?
|
The plaintext content of the arp-replies does not vary. But the wifi hardware increments its IV counter before encrypting each reply, therefore it does provide new usable IVs; which is the point of this attack.
You mustn't be too far from the AP though; also, it's better to perform the attack with multiple cards resending the arp-requests, so that the maximum bandwidth is reached. This usually doesn't go unnoticed
