Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

You need to be capturing in Monitor mode on the "spying computer", your device #3 listed above. See the link below and read the difference between promiscuous and monitor mode:

https://wiki.wireshark.org/CaptureSetup/WLAN

Also please verify that you have the "spying computer" to be set to the same WiFi channel as #1 and #2 are utilizing - i.e., the same WiFi channel used by your your WiFi network.

Also, verify that you are decrypting the packets in WiFi. For more information, please read:

https://wiki.wireshark.org/HowToDecrypt802.11

My recommendation would be capture the traffic, save the capture, and then decrypt the traffic to see if you have capture the required data. Then you can apply a display filter in Wireshark to view only wanted traffic such as filter only on WLAN MAC address of device #2 and TCP traffic.

Hope that helps