Ask Your Question

missed packets

asked 2022-03-14 22:17:38 +0000 gravatar image

I have iPhones talking to me another using Grandsteam Lite, via a Tplink wireless router. Using Wireshark on a W10 PC wireless. Wireshark sees the router and the W10 PC packets, bu not the iPhone packets, which are the most important to us. How do we et Wireshark to see the iphie packets?

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted

answered 2022-04-13 21:26:35 +0000

Ginny S gravatar image

I have two possible guesses:

(1) The iPhone may have been using cellular rather than WiFi. If neither cellular nor WiFi assist are turned off, it might choose to use its cellular connection even if connected to a network. OR

(2) The device on which you are capturing traffic is not in promiscuous mode so you can't see traffic that is directed to the capture device in some way (including broadcast and multicast). Can you see any devices' traffic on the network besides the capture device and the router? If so, is that traffic that your device wouldn't normally hear and process or are you only seeing traffic that your NIC would scoop up for you normally? You may have turned promiscuous mode on before capture but Windows 10 has some issues with it and I personally haven't been able to capture WiFi in promiscuous mode from Windows 10 without an extra adapter. If you want to dig into that and look for an alternative adapter, I recommend checking out this SecWiki page which shows different wireless adapters' supported capture modes, though focuses on monitor mode.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower


Asked: 2022-03-14 22:17:38 +0000

Seen: 123 times

Last updated: Apr 13 '22