Hello I heard that Wireshark does support decoding WPA. Does Wireshark decode WPA-traffic in realtime? Thank you very much! Joe asked 14 Jan '16, 09:56  joseph123 |
One Answer:
If in realtime means while Wireshark is capturing data, then the answer is yes, as long as Wireshark is able to see the 4 EAPOL frames, see the Wiki. If in realtime means output on the CLI while tshark is capturing, then please see my answer to the following question:
If you substitute -nr input.pcap with -ni interface (while 'interface' is a placeholder for the wifi interface name), you will get the decrypted WPA output at the CLI. If in realtime means something different, please tell us what it means to you. Regards answered 19 Jan '16, 08:03  Kurt Knochner ♦ |
What do you mean by "in real time"?