Ok I can decrypt a specified client connected to wifi by deauthing it and getting the handshake using Wireshark. After Wireshark captures the EAPOL messages it starts to decrypt the traffic. But I want to decrypt the traffic from ALL clients connected to the AP. I deauthenticate them and get all handshakes but not all their traffic gets decrypted. I don't know which one is decrypted but I'm sure not ALL of them. Any suggestions? asked 05 Feb '15, 00:03  srsh |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
how do you derive that conclusion?
Simply because the data from/to some clients are missing. In fact I can't find them by searching.