Revision history [back]

Hi Amato,

funny to see you again in a Wireshark forum after all those years. We used to work together, remember? I am one of the Bochum guys...

To answer your question: You need to retrieve not only the air traffic, but also the key from either hostapd or wpa_supplicant by using the -d -K flags. You'll find it explained in more detail here: https://wiki.wireshark.org/HowToDecrypt802.11

Hope this helps (although it may be way too late),

Sascha