I can't capture wifi packets on macbook using wireshark

First time here? Check out the FAQ!

eharo
3 ●1 ●1 ●2

Hi guys, I'm using a macbook Big Sur version macos 11.6.1, and I can't capture any packet using my Wi-Fi en0 adapter. I don't need monitor mode to see radio packet headers, I'm interested only on data regular packets. There is no error when I start the capture on wireshark, however it says "No packets captured". The strange part is the I can capture packets with "tcpdump -i en0"... I can even do a "tcpdump -i en0 -w test.pcap" and later open the file with wireshark. Does anyone could help me with?

add a comment

1 Answer

Sort by » oldest newest most voted

answered Nov 12 '1

Guy Harris
19905 ●3 ●667 ●207

I don't need monitor mode to see radio packet headers, I'm interested only on data regular packets.

Make sure you turn monitor mode off (the Wi-Fi adapters on newer Macs require that you disassociate from a wireless network network in order to capture in monitor mode, otherwise it doesn't give you any packets). Select Capture > Options, look for en0 in the list, and make sure the checkbox in the Monitor column is not checked.

link

Comments

Thanks Guy! Disabling the checkbox on the "monitor" column solved the issue!

eharo ( Nov 12 '1 )

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: Nov 11 '1

Seen: 12,089 times

Last updated: Nov 12 '21

I can't capture wifi packets on macbook using wireshark savecancel

1 Answer

Comments