0

So I wanted to sniff packets in my WiFi network. To capture them all I use monitor mode (as suggested in my previous question) . I know I can decrypt traffic using key by setting it in the wireshark options but I want to sniff for month or longer to do some analysis. I decided to use tshark or dumpcap but I don't know how to sniff and decipher the traffic in the same time without gui.

1

Did you try something like

tshark -nr input.pcap -o wlan.enable_decryption:TRUE -o "uat:80211_keys:\"wpa-pwd\",\" Passphrase:SSID\"" 

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.