When I apply a display filter for wlan frame types (wlan.fc.type eq 0) no results will show up. Sorry if I'm doing something very simple wrong but I couldn't find any solutions to my problem.
Using Wireshark 2.2.13.
Most likely you have not captured the real 802.11 frames but are dealing with "fake" Ethernet frames. You can verify this by looking at the Encapsulation type listed in Wireshark's "Statistics -> Capture File Properties" page. If it says, "Ethernet", you don't have 802.11 frames, thus your filter isn't going to work.
You can read more about the real 802.11 frames vs the fake Ethernet frames on the Wi-Fi (WLAN, IEEE 802.11) wiki page, and be sure to have a look at the WLAN (IEEE 802.11) capture setup page as well.
And that screenshot looks Windows-ish; you won't get real 802.11 frames on most platforms, including Windows, unless you're capturing in monitor mode, and, on Windows, you can only capture in monitor mode if you have Npcap, rather than WinPcap, installed. Wireshark's installer installs WinPcap; you would have to install Npcap yourself.
Asked: 2018-03-30 10:58:51 +0000
Seen: 704 times
Last updated: Mar 30 '18
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
