Wireshark-users: [Wireshark-users] Decrypting WPA-TKIP Traffic
From: cheuk pang <cheukcheukcheuk@xxxxxxxxxxx>
Date: Mon, 26 May 2008 04:30:33 +0000
Hello,

I captured some traffic on my home network, which uses the DD-WRT firmware with WPA-TKIP encryption. I followed the instructions at http://wiki.wireshark.org/HowToDecrypt802.11 and have successfully decrypted all incoming traffic (ex. HTTP replies). However, all outgoing traffic (ex. HTTP GET requests) seem to remain encrypted and I think that they are hidden in the IEEE 802 data packets. Can someone explain why this is?


Thanks,
Cheuk