Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: [Wireshark-users] 802.11 Decryption works under Mac, doesnt work under Vista

From: Ivan Miskevich <ivan.miskevich@xxxxxxxxx>
Date: Tue, 3 Aug 2010 10:29:50 +0400
Hello,

I'm capturing traffic from my home Wi-Fi network using MacBook Intel laptop in promiscuous mode (802.11).
I setup 802.11 decryption in Wireshark for MacOS using known SSID and passphrase. Decryption works, I'm able to see tcp packets in the packet flow, the IP's and contents are real.

The problem appears when I try to open saved pcap files under Windows Vista at another laptop. I can't decrypt neither using passphrase+SSID, nor by generating PSK key sequence using online tool http://www.wireshark.org/tools/wpa-psk.html.

My home network encryption settings are Security type: WPA2-Personal, encryption type AES (this is what I observe in "Manage Wireless Networks"). The wireshark is the latest downloaded from website.

br,
Ivan



--
Best regards,

Ivan Miskevich