Key Replay Counter Replay

Encryption 8 octets EAPOL-Key descriptor unverified

Increments per exchange, and a reply must carry the counter of the message it answers.

Reading a capture

The anti-replay mechanism for the handshake itself. Messages 1 and 2 share one value and messages 3 and 4 share the next, which is how you pair them up in a capture containing several handshakes at once.

Where it sits

Key Replay Counter

Authored in EAPOL-Key descriptor . Drawn in 4 frames.

Accuracy

Clause
802.11-2024 §12.7.2
Byte order
big-endian — network byte order
Verified
Not verified against the standard. Treat this as a claim, not a fact.