Jump to content


Alex V

Recommended Posts

I am having this issue on an mk7 with tcpdump captured wpa2-psk-ccmp encrypted frames:

My Wireshark is only able to decrypt L3-L7 for some multicast and broadcast data frames, but not unicast data frames.

(When loading other .pcap decryptable example files on the Internet, Wireshark is correctly decrypting all unicast data frames.)

The captured EAPOL handshake #3 seems to be correctly decrypted, showing everything in clear: GTK, KEK, KCK. 

Anyone else ran into this issue?




Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Create New...