Ask Your Question
0

macOS Big Sur 11.3.1 (20E241) unable to capture any packets via Wireshark

asked 2021-11-11 09:31:44 +0000

hieswar gravatar image

updated 2021-12-07 21:11:44 +0000

Guy Harris gravatar image

By using MacBook Pro with MACOS Big Sur 11.3.1 (20E241) unable to capture any packets via Wireshark3.4.9.

Getting below error, is there anything need to be done to start capturing the packets for wireless interface.

ERROR

As no data was captured, closing the temporary capture file.

Help about capturing can be found at

   https://gitlab.com/wireshark/wireshark/-/wikis/CaptureSetup
edit retag flag offensive close merge delete

Comments

Are you connected to a wireless network? Do you want to be?

Bob Jones gravatar imageBob Jones ( 2021-11-11 19:57:33 +0000 )edit

yes. Connected to Wireless network. Macbook has valid IP address. Using Macbook's terminal, tcpdump collect the wireless packet, working as expected. Only Wireshark is not capturing the wireless packet

hieswar gravatar imagehieswar ( 2021-11-11 20:19:36 +0000 )edit

On the otherhand tshark works fine to capture wireless packets, but tshark too not working when tried with monitor mode

hieswar gravatar imagehieswar ( 2021-11-12 10:53:07 +0000 )edit

tcpdump probably won't work in monitor mode, either.

Guy Harris gravatar imageGuy Harris ( 2021-12-09 21:17:22 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-12-06 06:05:37 +0000

Wireshark on MAC cannot be associated to an access point while capturing packets. Disassociate the MAC from the access point and try to capture again.

edit flag offensive delete link more

Comments

NEWER Macs cannot be associated to an access point while capturing packets in monitor mode.; they don't have this problem when not capturing in monitor mode. Older Macs don't have that issue.

tcpdump and TShark will only capture in monitor mode if run with the -I command-line flag. Perhaps Wireshark was defaulting to monitor mode.

Guy Harris gravatar imageGuy Harris ( 2021-12-07 06:39:07 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2021-11-11 09:31:44 +0000

Seen: 586 times

Last updated: Dec 07 '21