Can I capture WIFI Direct P2p packets?

asked 2018-03-15 15:42:48 +0000

GArmstrong@MavSysInc.com gravatar image

I have an Android Samsung Galaxy Tab3 sending WiFi Direct tcp packets to a TI microprocessor. This is working fine but I never get reply packets from the micro. I would like to use WireShark to see if anything is coming back. I have Wire Shark 2.4.5 running on my laptop but I don't see any P2p traffic?? All I can see is the WIFI router traffic.

edit retag flag offensive close merge delete

Comments

What laptop do you have, and what capturing mode do you use? In wireless networks, in order to see other than the capturing machine's own traffic, you have to capture in monitoring mode, not only promiscuous one, and some wireless NICs or their drivers for particular operating systems do not support it at all.

You should be fine with Mac, with all the rest is is a matter of luck.

sindy gravatar imagesindy ( 2018-03-18 11:04:39 +0000 )edit

HP ZBook G17 bought new a few months ago. Intel dual Band Wireless-N 7260 I have a Riverbed AirPCap 802.11 on order.

GArmstrong@MavSysInc.com gravatar image[email protected] ( 2018-03-19 14:23:44 +0000 )edit

And what OS? Presumably Windows as you're buying an AirPCap? I thought Riverbed had discontinued the AirPCap?

grahamb gravatar imagegrahamb ( 2018-03-19 14:35:21 +0000 )edit

Windows7 PRO. I found Riverbed AirPCap on Ebay for $300. I found Promiscuous mode in Capture -> Options and Edit -> Preferences -> Capture but never found a way to select Monitor mode??

GArmstrong@MavSysInc.com gravatar image[email protected] ( 2018-03-19 15:03:47 +0000 )edit

A major reason for AirPcap was that normal WiFi hardware and driver issues on Windows made promiscuous mode impossible. Hopefully you'll have more success with the AirPcap.

You could also try to boot into Linux, e.g. a Kali live CD, and see if that's any better.

grahamb gravatar imagegrahamb ( 2018-03-19 15:22:10 +0000 )edit