Can the PTK, from the WPA handshake (or handshake packets), be saved and used for decoding subsequent captures? In other words, when raw 802.11 packets are being captured to a ring buffer, if the handshake is saved from a buffer, can it be used to decrypt the other buffers in the ring? asked 15 Apr '14, 07:30  Magnumb |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
