How Wireshark decrypts WiFi data packets

our wifi Packets if you don't choose open model It's all encrypted , How can we make use of wireshark To decrypt data Bao Er ？

Here we will briefly talk about . 

Premise ： You know, wifi Encryption method of ,ssid , key.

open wireshark Start the bag. Generally, it is unlikely that the network card must support sniffer mode So it's commonly used ominpick To catch , And then connect client.  Remember to catch client and ap Between key Communication package . That is to say key The four time hand package . Otherwise, there is no way to decrypt .  

Use wireshark Got it wifi If the packet is encrypted , Only ciphertext can be displayed , Can't get real data .

If you know AP and SSID and key, You can decrypt it wifi Data packets , Display the data of the upper layer protocol . 

stay wireshark Set as follows ：

Edit -> Preferences -> Protocols -> IEEE802.11 -> Edit. 

Click on “+” Create a new one entry, With my AP For example ,Key type choice wps-psk,key fill (key:SSID). 

The specific steps are shown in the figure ：

    

   

Note here that there may be SSID：key form , This is because wpa-psk The encryption key By key and ssid as well as anounce number Come together , This is why we must 4 various key Exchanged packets take anouce number Of . 

Set the , Click on ok that will do ！