0

So I wanted to sniff packets in my WiFi network. To capture them all I use monitor mode (as suggested in my previous question) . I know I can decrypt traffic using key by setting it in the wireshark options but I want to sniff for month or longer to do some analysis. I decided to use tshark or dumpcap but I don't know how to sniff and decipher the traffic in the same time without gui.

Improve this question

1 Answer 1

Reset to default
1

Did you try something like

tshark -nr input.pcap -o wlan.enable_decryption:TRUE -o "uat:80211_keys:\"wpa-pwd\",\" Passphrase:SSID\""
Improve this answer
0

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .