Can I capture internet traffic between an AP and a connected wireless device when in monitor mode?

edit

Thanks for your answer. In the first instance, I just wanted to know if it should be possible to capture data traffic between two devices on a wireless network to which I am not currently connected (because the adapter is in monitor mode). The first link seems to say that on MacOS, only non-data frames can be captured

Sorry, I have never captured WiFi traffic using a Mac. But you should be able to capture data traffic between 2 devices via WiFi in monitor mode. I am not certain if there are any special commands that are needed to configure the adapter to monitor mode, configure the adapter to a specific WiFi channel (i.e., the channel that is being used between the 2 devices), and then start the capture.

For Linux, you must set the adapter to monitor mode then set the WiFi channel to capture the wanted traffic

If you have a Mac, try this tool for helping prep the adapter for capture:

https://www.adriangranados.com/apps/a...

The first link seems to say that on MacOS, only non-data frames can be captured

I interpret the link different - you will only get non-data frames if you are in monitor mode. If you just turn on a capture to the interface without monitor mode first, you will get fake Ethernet frames and none of the 802.11 control and management traffic will be present.

I interpret the link different - you will only get non-data frames if you are in monitor mode.

Your interpretation is correct.

Thanks all. After investigating a bit further, I think the data frames are being captured and explicitly setting the channel with airport -c seems to help but I'm not 100% sure. Having been used to passing traffic through a proxy and being able to see individual http requests and responses, the captured packets are quite alien to me. I'm guessing that the encrypted data frames will contain that information; protocol, headers, contents of POST requests etc