This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I have been trying to capture and decrypt from a WPA2-PSK wireless network, but the preshared key has a "£" (UK pound sign).

It seams that wireshark (1.12.1 Win7 with AirPCAP) is corrupting the Preshared key. If I enter the PSK in the "Decryption key management" dialog, exit the dialog and reopen it the key is corrupted.

Has anyone else come across this?

asked 06 Nov '14, 09:31

C_P's gravatar image

C_P
11113
accept rate: 100%


After some research I have been able to resolve my issue.

From the "How to Decrypt 802.11" wiki page?

"The WPA passphrase and SSID preferences let you encode non-printable or otherwise troublesome characters using URI-style percent escapes, e.g. %20 for a space. As a result you have to escape the percent characters themselves using %25."

By replacing the "£" with "%a3" I am able to decrypt the capture.

Interestingly the last two characters of the corrupted part of the PSK was "a3".

permanent link

answered 06 Nov '14, 12:18

C_P's gravatar image

C_P
11113
accept rate: 100%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×9

question asked: 06 Nov '14, 09:31

question was seen: 926 times

last updated: 06 Nov '14, 12:18

p​o​w​e​r​e​d by O​S​Q​A