ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-users: [Wireshark-users] Only one way decryption with WPA2

From: Erak Lancos <erak.lancos@xxxxxxxxx>
Date: Mon, 10 May 2010 11:53:22 +0300
Hi,


I am trying to observe and decrypt the WPA2 encrypted traffic on my own network. I can see the 4-way EAPOL-Key exchange in the capture. Yet, only the traffic from the computer to AP is decrypted by Wireshark. It can not decrypt the downlink traffic from AP to the computer.

The AP is U.S. Robotics 9108 and I am doing the capture on a Macbook Pro with Atheros 5416 chip. The traffic is between AP and a laptop with intel chipset (I am not sure which).

Many thanks for any suggestions.

Erak