WiFi UDP does not show up in wireshark
Running Wireshark on a Mac. Have a wifi lan with the Mac, a PC, A wireless router and 2 iPhones running Grandstream Wave software. Wireshark shows all the traffic except the phones, which is the most critical for me. The Wave info says they use UDP for voice etc. How can I get Wireshark to show the phones traffic?
So you're seeing the traffic to and from the PC? If so, did you have to enter a network password into Wireshark to see the traffic?
And the phones are associated with the Wi-Fi network (they show the Wi-Fi icon at the top)?
Yes I see the PC traffic. No passwords in any devices. The phones show wifi at the top. The wireless router assigns ip addresses to all the devices, including the phones.
Bob
So you're saying your Wi-Fi network is unprotected, and has no password associated with it?
Yes. No passwords.
So if you:
what traffic do you see?
Thanks Guy! The Mac does not allow disconnection from all wifi networks, but if I connect to some other network on a different subnet, I assume that will work, if filtered out. I searched the manual, but I cannot find info on how to put the Mac into Monitor mode. Please advise.
In the Wi-Fi preferences pane, if it's connected to the network you're trying to capture on, un-check the "Automatically join this network", turn the Wi-Fi off, and turn it on again. If it asks whether you want to join that network, say "no". If it automatically joins another network, repeat the process until it joins no networks.
No, because the problem we're trying to diagnose here is whether being connected to any network at all interferes with traffic capture.
Not the Mac, the Wi-Fi adapter. Wireshark will do that for you (of all the OSes on which Wireshark works, the standard libpcap ...(more)
A typical wireless router will have two radios supporting two Wifi channels, one in the 2.4GHz and one in the 5Ghz bands. Could your PC and Mac have connected using a channel on one band and the iPhones have connected using a channel on the other band?
Guy - THANK YOU!!! That works! But Wireshark should change the format of the Options screen to make it clear that there are more options to the right of the initially displayed screen. This wasted a lot of my time.
Jim - You are right, but I had turned off the 5 GHz portion as I do not need it. Thanks!