Ask Your Question
0

I can't capture wifi packets on macbook using wireshark

asked 2021-11-11 23:32:20 +0000

eharo gravatar image

Hi guys, I'm using a macbook Big Sur version macos 11.6.1, and I can't capture any packet using my Wi-Fi en0 adapter. I don't need monitor mode to see radio packet headers, I'm interested only on data regular packets. There is no error when I start the capture on wireshark, however it says "No packets captured". The strange part is the I can capture packets with "tcpdump -i en0"... I can even do a "tcpdump -i en0 -w test.pcap" and later open the file with wireshark. Does anyone could help me with?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2021-11-12 07:09:46 +0000

Guy Harris gravatar image

I don't need monitor mode to see radio packet headers, I'm interested only on data regular packets.

Make sure you turn monitor mode off (the Wi-Fi adapters on newer Macs require that you disassociate from a wireless network network in order to capture in monitor mode, otherwise it doesn't give you any packets). Select Capture > Options, look for en0 in the list, and make sure the checkbox in the Monitor column is not checked.

edit flag offensive delete link more

Comments

Thanks Guy! Disabling the checkbox on the "monitor" column solved the issue!

eharo gravatar imageeharo ( 2021-11-12 17:54:59 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-11-11 23:32:20 +0000

Seen: 11,674 times

Last updated: Nov 12 '21