This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Trouble with 802.11 decryption key formats

0

Hi!

I will try to make this simple, but recently I have been playing around with decrypting 802.11 packets on Wireshark for Mac OS. I had successfully done it many times on my other network, however when I tried it on my main network I noticed that the decryption process failed. If I am correct it is because my SSID on my main network uses spaces and a minus symbol "-". How would I format the key to work even with the spaces and "-" symbol?

This is a similar make of my key that I am attempting to use

wpa-pwd: coolpasswordhere:cool bssid-here

This is a similar make of my previous key I used with my other network

wpa-pwd: coolpasswordhere:bssidhere

Thanks!

asked 15 Dec '16, 15:25

milorules1012's gravatar image

milorules1012
11114
accept rate: 0%


One Answer:

1

I don't use special characters in my SSID names so do not run into this particular problem. However, a workaround might be to use an offline PMK generator such as

https://www.wireshark.org/tools/wpa-psk.html

and then use these results in Wireshark as WPA-PSK entry instead of WPA-PWD:

alt text

Copy the generated PSK into Wireshark:

alt text

answered 16 Dec '16, 02:50

Bob%20Jones's gravatar image

Bob Jones
1.0k2515
accept rate: 21%

This works and now I know what that option does too! Thanks for the help!

(16 Dec '16, 13:43) milorules1012