Let's first set up Shared Authentication for our Wireless Lab network. I have done this on my access point by setting the security mode as WEP and Authentication as Shared Key:

Let's now connect a legitimate client to this network using the shared key we have set in step 1.

In order to bypass Shared Key Authentication, we will first start sniffing packets between the access point and its clients. However, we would also like to log the entire shared authentication exchange. To do this, we use the airodump-ng utility using the airodump-ng mon0 -c 11 --bssid <mac> -w keystream command. The -w option, which is new here, requests Airodump-NG to store the packets in a file whose name is prefixed with the word keystream. Incidentally, it might be a good idea to store different sessions of packet captures in different files. This...