ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Wireshark-bugs: [Wireshark-bugs] [Bug 11172] IEEE 802.11: 802.1X (WPA-EAP) rekeying support - Pr

Date: Sun, 03 May 2015 20:20:04 +0000

Comment # 3 on bug 11172 from
Some clarification:

This will only be useful when you have captured encrypted packets in monitor
mode and you have the PMK's (aka PSK's) used for the encryption. You also need
all 4-Way handshakes from the initial connect up to the part of the capture you
are interested

For WPA-PSK the PMK this will be a static value, derived from the Password. So
when wireshark knows the WLAN password it will work.

WPA-Enterprise makes it harder. Each rekey uses a new PMK/PSK and you have to
get these from the Radius server somehow.


You are receiving this mail because:
  • You are watching all bug changes.