Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

I would recommend reading the following 2 wiki pages regarding WiFi capturing using Wireshark:

https://wiki.wireshark.org/CaptureSetup/WLAN

https://wiki.wireshark.org/HowToDecrypt802.11

Questions: 1. Is the data encrypted on WiFi? If yes, you should see Data and/or QoS Data frames in your capture. 2. Are you able to decrypt the data? You will need the SSID and WiFi passphrase. You will also need to capture the 4 EAPOL keys - assuming that personal WiFi encryption is being used. 3. If after decryption, can you see any HTTP/HTTPS traffic?

If you are trying to capture traffic from a particular WiFi client, it might be better to create a capture filter to capture only frames to/from that device.

Hope that helps

I would recommend reading the following 2 wiki pages regarding WiFi capturing using Wireshark:

https://wiki.wireshark.org/CaptureSetup/WLAN

https://wiki.wireshark.org/HowToDecrypt802.11

Questions: 1. Questions:

  1. Is the data encrypted on WiFi? If yes, you should see Data and/or QoS Data frames in your capture. 2. capture.
  2. Are you able to decrypt the data? You will need the SSID and WiFi passphrase. You will also need to capture the 4 EAPOL keys - assuming that personal WiFi encryption is being used. 3. used.
  3. If after decryption, can you see any HTTP/HTTPS traffic?

If you are trying to capture traffic from a particular WiFi client, it might be better to create a capture filter to capture only frames to/from that device.

Hope that helps