Wireshark-dev: Re: [Wireshark-dev] Wishlist Request: 802.11 GTK Decryption
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Jouni Malinen <jkmalinen@xxxxxxxxx>
Date: Fri, 12 Nov 2010 02:02:27 +0200
On Fri, Nov 12, 2010 at 1:49 AM, Anthony Murabito
<anthony.murabito@xxxxxxxxx> wrote:
> Thanks so much for the reply & info. Can you point me in the direction of
> the external tools than can perform the decryption?

airdecap-ng (part of aircrack-ng) would be one option. I'm working on
more generic IEEE 802.11 protocol analyzer (wlantest, in the
hostap.git tree with hostapd/wpa_supplicant) that can also do this
(though, it is still in early enough state of not having any
documentation available yet). With either program, you can feed in a
pcap file with encrypted frames and some information about the key
(e.g., passphrase for WPA2-Personal network) and get another pcap file
with decrypted frames as the output.

- Jouni