Ask Your Question
0

Wireshark Promiscuous Mode not working on MacOS Catalina

asked 2020-09-18 06:09:09 +0000

SS gravatar image

Hi, I am using wireshark v3.2.6 on macOS 10.15.6 and I am not able to capture all network traffic even though promiscuous mode is turned-on for wireshark. I can capture the traffic for my machine on en0 interface but not for any other device on my network. Am I missing something over here?

edit retag flag offensive close merge delete

2 Answers

Sort by ยป oldest newest most voted
0

answered 2020-09-18 07:35:34 +0000

Guy Harris gravatar image

Does your machine have a Wi-Fi interface? If so, then en0 is probably a Wi-Fi interface and, as Jaap notes, They're Different, in that promiscuous mode doesn't work the way it does on Ethernet interfaces.

If you don't have a Wi-Fi interface, and en0 is an Ethernet interface, then are you on a switched network? If so, then, even if the adapter and the OS driver for the adapter support promiscuous mode, you might still not be able to capture all traffic, because the switch won't send all traffic to your Ethernet, by default. See the page for Ethernet capture setup in the Wireshark Wiki for information on capturing on switched Ethernets.

edit flag offensive delete link more
0

answered 2020-09-18 06:31:11 +0000

Jaap gravatar image

en0 represents the WiFi interface, yes? Then have a look here what's involved with that.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2020-09-18 06:09:09 +0000

Seen: 103 times

Last updated: Sep 18