ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Changing the default for ieee802.11 decryption

From: Graham Bloice <graham.bloice@xxxxxxxxxxxxx>
Date: Fri, 17 Jul 2015 23:09:52 +0100

On 17 July 2015 at 22:03, Joerg Mayer <jmayer@xxxxxxxxx> wrote:
Hello,

I just wasted some time when trying to decode ieee 802.11 wpa2 traffic: It
wouldn't decode even after entering the keys. In the end it turned out that
decryption is off by default and needs to be turned on seperately.
IMO this violates the principle of least surprise. It should be turned on
by default to make things easier for "normal" users and power users may still
change this for their needs.

Objections to me changing this?

Thanks
   Jörg


It's kind of documented, from the HowToDecrypt802.11 Wiki page:

Gotchas

Along with decryption keys there are other preference settings that affect decryption.

  • Make sure Enable decryption is selected.


Are there any performance issues by leaving it enabled?

--
Graham Bloice