Wireshark-bugs: [Wireshark-bugs] [Bug 11172] IEEE 802.11: 802.1X (WPA-EAP) rekeying support - Pr

Date Prev · Date Next · Thread Prev · Thread Next
Date Index · Thread Index · Other Months · All Mailing Lists
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sun, 03 May 2015 20:20:04 +0000

Comment # 3 on bug 11172 from 
Some clarification:

This will only be useful when you have captured encrypted packets in monitor
mode and you have the PMK's (aka PSK's) used for the encryption. You also need
all 4-Way handshakes from the initial connect up to the part of the capture you
are interested

For WPA-PSK the PMK this will be a static value, derived from the Password. So
when wireshark knows the WLAN password it will work.

WPA-Enterprise makes it harder. Each rekey uses a new PMK/PSK and you have to
get these from the Radius server somehow.

You are receiving this mail because:
  • You are watching all bug changes.