--- title: How to Decrypt PSK Packets Captured with Wireshark description: During fault finding with WLAN networks, there comes a point where you just have to take it down to the lowest level. image: https://blog.iptel.com.au/hubfs/Blogs/How%20to%20Decode%20PSK%20with%20Wireshark/How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark%20(Instagram%20Post%20(Square)).gif --- [![IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)](https://blog.iptel.com.au/hs-fs/hubfs/IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png?width=200&height=59&name=IPTellogo-byline-2020-dark-v2-pnd-optimised-500%20(1).png "IPTellogo-byline-2020-dark-v2-pnd-optimised-500 (1)")](https://iptel.com.au) - [Home](https://iptel.com.au/) - [Solutions](https://iptel.com.au/solutions) Technologies - [Cisco Access Manager](https://iptel.com.au/technologies/cisco-access-manager) - [Cisco Catalyst Centre](https://iptel.com.au/technologies/cisco-catalyst-center) - [Cisco Meraki](https://iptel.com.au/technologies/cisco-meraki) - [Cisco SDA Fabric](https://iptel.com.au/technologies/cisco-sda-fabric) - [Cisco Spaces](https://iptel.com.au/technologies/cisco-spaces) - [Everpure Storage](https://iptel.com.au/technologies/everpure-storage) - [Industrial IoT](https://iptel.com.au/technologies/industrial-iot) - [LAN](https://iptel.com.au/technologies/lan) - [Security and Cisco ISE](https://iptel.com.au/technologies/security-and-cisco-ise) - [Thousand Eyes](https://iptel.com.au/technologies/thousandeyes) - [Virtualisation](https://iptel.com.au/technologies/virtualisation) - [Wi-Fi](https://iptel.com.au/services/wi-fi-surveys) Services - [Backup Assure](https://iptel.com.au/services/backup-assure) - [Cisco URWB](https://iptel.com.au/services/cisco-urb) - [Cisco Webex Calling](https://iptel.com.au/services/cisco-webex-calling) - [Eco-Friendly Network Refresh](https://iptel.com.au/services/eco-friendly-network-refresh) - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Splunk](https://iptel.com.au/services/splunk) - [Wi-Fi Assurance Review](https://iptel.com.au/services/wi-fi-assurance-review) - [Wi-Fi Surveys](https://iptel.com.au/services/wi-fi-surveys) - [Industries](https://iptel.com.au/industries) Education and Healthcare - [Education and Campuses](https://iptel.com.au/industries/education) - [Healthcare and Clinical](https://iptel.com.au/industries/healthcare) - [Aged Care](https://iptel.com.au/industries/aged-care) Enterprise - [Enterprise Networks](https://iptel.com.au/industries/enterprise) Industrial - [Mining and Camps](https://iptel.com.au/industries/mines) - [Utilities](https://iptel.com.au/industries/utilities) Retail & Warehousing - [Retail](https://iptel.com.au/industries/retail-and-stores) - [Warehousing](https://iptel.com.au/industries/warehousing) Entertainment - [Stadiums](https://iptel.com.au/industries/stadiums) - [Hospitality](https://iptel.com.au/hospitality-and-hotels) - [MSP](https://iptel.com.au/managed-services) Meraki MSP - [Meraki Access and Security](https://iptel.com.au/managed-services/meraki-access-and-security) - [Meraki SD Wan](https://iptel.com.au/managed-services/meraki-sd-wan) Cisco MSP - [Cisco Secure Access](https://iptel.com.au/managed-services/cisco-secure-access) - [Security Service Edge](https://iptel.com.au/managed-services/security-service-edge) FSO MSP - [Full Stack Observability](https://iptel.com.au/managed-services/full-stack-observability) Meeting Rooms MSP - [Meeting Rooms as a Service](https://iptel.com.au/managed-services/meeting-rooms-as-a-service) - [Equipment](https://iptel.com.au/services/network-equipment-supply) Equipment Supply - [Network Equipment Supply](https://iptel.com.au/services/network-equipment-supply) - [Buy Cisco Equipment](https://iptel.com.au/services/cisco-equipment-supply) - [Buy Meraki Equipment](https://iptel.com.au/services/meraki-equipment-supply) Get Pricing - [Get a Hardware Quote](https://iptel.com.au/services/network-equipment-supply#hardware-quote) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) - [Blog](https://blog.iptel.com.au) - [Resources](https://iptel.com.au/resources) Free Resources - [Top Wi-Fi Secrets](https://iptel.com.au/top-8-wi-fi-secrets) - [Cisco SDA Fabric](https://iptel.com.au/the-cios-guide-to-sda-fabric) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) Assessments - [Cloud AI Assessment](https://score.iptel.com.au/cloud-ai-assessment) - [Collaboration Assessment](https://score.iptel.com.au/collaboration-assessment) - [Network Assessment](https://score.iptel.com.au/network-assessment) - [Security Assessment](https://score.iptel.com.au/security-assessment) - [Splunk Assessment](https://score.iptel.com.au/splunk-assessment) Tools - [Automating Meraki](https://www.automatingmeraki.com) - [MAC Address Converter](https://iptel.com.au/resources/mac-address-converter) - [MSP Assessment Tool](https://score.iptel.com.au/cisco-managed-services) - [Thousand Eyes Option Tool](https://score.iptel.com.au/thousandeyes) - [Wi-Fi AP Estimator](https://iptel.com.au/resources/wifi-access-point-estimator) Demos and Design - [Request a Meraki Demo](https://iptel.com.au/free-meraki-demo) - [FREE Meeting Room Design](https://iptel.com.au/schedule-meeting-room-design-session) - [Catalyst Center Enablement](https://iptel.com.au/cisco-catalyst-center-enablement) - [About](https://iptel.com.au/about-us) IPTel Solutions - [About us](https://iptel.com.au/about-us) - [Job Applications](https://careers.iptel.com.au/job-application) - [Privacy Policy](https://iptel.com.au/privacy-policy) - [Careers Blog](https://careers.iptel.com.au) Contact Us - [Contact Us Form](https://iptel.com.au/contact-us) - [Email Us](mailto:sales@iptel.com.au) Customer - [Customer Feedback](https://iptel.com.au/customer-feedback) - [Customer Referral](https://iptel.com.au/customer-referral) - [Terms and Conditions](https://iptel.com.au/terms-and-conditions) News Stories - [Project Guardian uses Networking Infrastructure as a Sensor](https://www.dailytelegraph.com.au/news/nsw/transport-for-nsw-launches-worldfirst-sensor-trial-to-stop-rail-and-bridge-trespassers/news-story/8dc52e8fbca4c471da408e670cf0163e) - [IPTel partners for monitoring for Meeting Rooms as a Service](https://www.commsbusiness.co.uk/content/news/highlight-partners-with-iptel-solutions) - [Webex Monitoring with Highlight](https://itbrief.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [ITBrief with Meeting Room Monitoring](https://itbrief.com.au/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [Cisco Webex Meeting Rooms Monitoring](https://telconews.co.uk/story/highlight-iptel-add-webex-monitoring-for-meeting-rooms) - [IPTel adopts Highlight](https://itbrief.com.au/story/iptel-adopts-highlight-to-enhance-managed-services) - [Highlight MSP Upgrade](https://datacentre.solutions/news/71753/iptel-solutions-upgrade-with-highlights-service-platform) - [Cisco 360](https://www.crn.com.au/news/2026/networking/aussie-partners-react-cisco-360) - [DP World Transformation](https://www.cisco.com/site/us/en/about/case-studies-customer-stories/dp-world.html) - [Cisco Managed Services](https://www.arnnet.com.au/article/1251771/how-partners-can-take-a-leap-of-faith-with-managed-services.html) - [Project Delivery Excellence](https://channellife.com.au/story/cisco-honours-top-nz-partners-cisco-live) - [Great Place to Work](https://greatplacetowork.com.au/companies/iptel-solutions/) - [Wi-Fi Doesn't have to be Unreliable](https://www.techpartner.news/feature/iptel-wi-fi-doesnt-have-to-be-unreliable-494069) Buying from IPTel - [Buying Panels](https://iptel.com.au/professional-supply-panels) - [IPTel Store](https://store.iptel.com.au) - [Request a Quote](https://iptel.com.au/request-a-quote) - [Managed Services](https://iptel.com.au/managed-services-enquiry) Case Studies - [DP World Video](https://blog.iptel.com.au/hubfs/Case%20Studies/DP%20World_Case_Study.mp4) - [DP World](https://blog.iptel.com.au/dp-world-case-study) - [Backup Assure](https://blog.iptel.com.au/backup-assure-a-disaster-recovery-case-study) [Contact Us](https://iptel.com.au/contact-us) This is a search field with an auto-suggest feature attached. - There are no suggestions because the search field is empty. ## How to Decrypt PSK Packets Captured with Wireshark July 24, 2026 During fault finding with WLAN networks, there comes a point where you just have to take it down to the lowest level. Sometimes it is because you have a bug and you need to see the exact behaviour of devices in the network, in order to work out where the issue lies. ![How to decrypt Psk Wi-fi with Wireshark](https://blog.iptel.com.au/hs-fs/hubfs/Blogs/How%20to%20Decode%20PSK%20with%20Wireshark/How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark.png?width=2240&name=How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark.png) Having worked on quite a lot of bugs, this is something that every WLAN engineer will eventually have to do. Omnipeek is a powerful sniffer tool, which we use for these scenarios. It's not the cheapest tool though, so as an alternative, using Wireshark is a great option. Wireshark has been around for quite a long time, morphing from Ethereal (can you remember that far back?) to what we know and love as Wireshark today. Related reading - [Wi-Fi Phone Dropouts](https://blog.iptel.com.au/wifi-phone-dropouts) - [Wi-Fi Assurance Review](https://blog.iptel.com.au/wifi-assurance-review) --- ## Wireshark Packet Captures ![Wireshark logo](https://blog.iptel.com.au/hs-fs/hubfs/Imported_Blog_Media/wireshark_logo.png?width=265&name=wireshark_logo.png) Of course packet captures aren't for the faint of heart - you'll capture millions of packets and often can be looking for a needle in a haystack. That elusive failure in a sequence of packets - hard to spot, but sometimes you have to dig really deep to find the root cause. Apart from needing adapters which can do monitor mode (many cannot), you'll likely need one per channel you're trying to sniff - which means a few if you're debugging 5GHz. Related reading - [Wi-Fi Predictive Designs](https://blog.iptel.com.au/wifi-predictive-survey-wifi-heatmaps) - [Wi-Fi Design Technical Requirements](https://blog.iptel.com.au/wi-fi-design-technical-requirements) - [Wi-Fi Design Business Requirements](https://blog.iptel.com.au/wi-fi-design-business-requirements) --- ## PSK Decode Gotchas Once you've got the sniff, though, you can look at the outer headers. That's going to tell you how the device is roaming, how it is communicating and if anything obvious is occurring at that level. Sometimes though, you really need to see inside the packet trace. For example, when decoding a voice sniff, being able to replay it to hear the moment a dropout occurs helps to isolate the section of the trace leading up to that event. The decode itself is fairly easy but there are a couple of gotchas: 1\. You have to capture the full 4-way handshake of the client, as that's where the session key (the PTK) for that client is derived from the PMK, the nonces and the MAC addresses. If you only capture data after the handshake has happened, you can't decrypt any of it. 2\. Wireshark can only keep track of a limited number of associations in a capture, so if a lot of associations are being captured at once, it may fail to decode the client you are after. You can get around this by exporting just this client's packets to a separate file (including the 4-way handshake) and then try again. This page tells you the general process (and where you type in the PSK in Wireshark): [https://wiki.wireshark.org/HowToDecrypt802.11](https://web.archive.org/web/20190307172519/https://wiki.wireshark.org/HowToDecrypt802.11) Related reading - [5 ways Catalyst Center solves your challenges](https://info.iptel.com.au/cisco-dna) - [Wi-Fi Pre-deployment Surveys](https://blog.iptel.com.au/wireless-pre-install-surveys) - [Recessed Ceiling Tiles](https://blog.iptel.com.au/recessed-ap-installation) - [Wi-Fi vs 5G](https://blog.iptel.com.au/cisco-private-5g) --- ## Capture ALL Packets over the Air One other gotcha is that you can't capture everything over the air with Wireshark on Windows using the standard WinPcap drivers (that ship with Windows Wireshark). This is because WinPcap can't put a wireless NIC in monitor mode. Other options are: - Third party pcap drivers that work with Windows Wireshark such as Npcap or AirPcap - Using Wireshark on OSX or Linux Using other packet capture tools (to capture the packets and later open in Wireshark) such as: - Omnipeek for Windows (more expensive) - Microsoft Network Monitor 3.4 (free to download) - OSX Wireless Diagnostics Sniffer (built in to OSX) - Kismet on Linux Related reading - [Cisco Catalyst Center Assurance](https://blog.iptel.com.au/blog/cisco-catalyst-center-assurance) - [5 Ways Catalyst Center Solves your Challenges](https://info.iptel.com.au/cisco-dna) --- ### What We've Learnt about PSK Packets Captured with Wireshark Wireshark is a great, free tool - what's not to like! For newbies, there's a lot in there though - but that's true for any sniffer tool. When doing captures, you will be presented with mountains of data to sift through. Careful logging when taking sniffs of just what you're after will help zero in on the relevant packet exchanges you're looking for though. If you've got the money, Omnipeek is a paid-for tool that's a bit of an industry standard. Either way, you'll need the correct adapters to be able to sniff all the traffic over the air, so do the research first and get the right ones for the tool you're using. Happy sniffing! Please [contact us](https://iptel.com.au/contact-us) should you need any assistance.   Related reading - [Cisco AI Analytics in operation](https://blog.iptel.com.au/cisco-ai-analytics-in-operation) - [Cisco Machine Learning and AI](https://blog.iptel.com.au/cisco-machine-learning-and-ai) #### Related Articles ###### [Troubleshooting with Cisco Catalyst Center](https://blog.iptel.com.au/troubleshooting-with-cisco-catalyst-center) Sept 11, 2025 ###### [AP Placement - Location Grade Wi-Fi Tracking](https://blog.iptel.com.au/ap-placement-location-grade) July 24, 2026 ###### [Wireless First: University Wi-Fi](https://blog.iptel.com.au/wireless-first-university-wi-fi) Nov 24, 2025 Free tool ### How Many Wi-Fi Access Points Do You Need? Work out APs, PoE and switch ports floor by floor, using the same survey grades our Cisco wireless engineers design to. Takes under a minute. [Try the AP Estimator →](https://iptel.com.au/resources/wifi-access-point-estimator?utm_source=blog&utm_medium=cta&utm_campaign=ap-estimator) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "IPTel Solutions", "url" : "https://blog.iptel.com.au/author/iptel-solutions" }, "dateModified" : "2026-10-03T07:35:52.884Z", "datePublished" : "2026-07-24T04:16:38.000Z", "headline" : "How to Decrypt PSK Packets Captured with Wireshark", "image" : [ "https://blog.iptel.com.au/hubfs/Blogs/How%20to%20Decode%20PSK%20with%20Wireshark/How%20to%20decrypt%20Psk%20Wi-fi%20with%20Wireshark%20(Instagram%20Post%20(Square)).gif" ], "mainEntityOfPage" : { "@id" : "https://blog.iptel.com.au/how-to-decrypt-psk-packets-captured-with-wireshark", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://blog.iptel.com.au/hubfs/IPTel_Solutions_February2020%20-%20Header%20SiteMap/Images/IPTellogo-byline-2020-dark-v2.png" }, "name" : "IPTel Solutions Pty Ltd" } } ```