Sniffer® Portable Professional User's Guide - NetScout

128-bit.
5 To specify new WPA-WPA2 keys for decryption:
Displaying Captured Data
a Turn on the encryption key by checking its On radio button.
b Specify the SSID for the WPA/WPA2-encrypted network. This
is typically a short string used to identify a wireless network
(for example, labnet).
c WPA/WPA2 encryption relies on a pre-shared passphrase for
encryption. Enter the passphrase associated with this SSID.
d Repeat Step a though Step c for each SSID you expect Sniffer
Portable Professional to monitor.
6 Click OK on the Select WEP-WPA Keys dialog box.
Sniffer Portable Professional attempts to use the specified keys to
decrypt the data in the selected buffer or trace file and opens a new
window with the results. If you specified the correct keys, the new
window displays the newly-decrypted data. You can save the
decrypted data to a new trace file using the usual File > Save
command.
IMPORTANT: Make sure the data to decrypt includes four
EAPOL Exchange packets for each SSID/passphrase combo you
have entered. You can obtain these packets by capturing the
Client to AP association packets. If these EAPOL Exchange
Packets are not present, the corresponding
WPA/WPA2-encrypted packets cannot be decrypted.
NOTE: An easy way to determine whether you have entered the
correct WEP keys is to check for the presence of a large number of
WEP-ICV Error Expert alarms. If there are an abnormally large
number of these alarms, you probably have not entered the correct
WEP keys for the encrypted data in the selected buffer or trace file.
User’s Guide 201