I am trying to figure out some stuff related to my home automation system and am using Wireshark in monitor mode to capture packets. It would be very helpful to see IP addresses associated with the devices, but all three SSIDs in my house are WPA2 encrypted.
There are a number of resources on-line that show how to add SSIDs and passwords to Wireshark. There are also other resources, such as wireshark monitor mode, decrypting capture, that specifically state, "You need to make sure you capture the initial EAPOL handshake...".
Can someone please explain the reason that the initial handshake needs to be captured. Going around and power cycling devices would be a major PITA - it would seem that having the passwords should suffice.