Ask Your Question
0

how to enable monitor mode in windows 11

asked 2023-12-08 06:25:37 +0000

learner gravatar image

Hello!

I'm a beginner in Wireshark. I tried to monitor my network to capture packets from my smartphone by capturing eapol and http packets. Of course i failed because after some investigation I found out that my wifi (802.11n) does not support monitor mode.

Please guide me to how I can enable monitor mode and capture eapol and http packets.

Also I read an answer that said - "Don't do monitor mode capture on Windows unless you are using special software, such as Omnipeek, CommView, etc."

Can someone please explain the reason?

Thank you.

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-12-08 10:52:13 +0000

Bob Jones gravatar image

Please guide me to how I can enable monitor mode and capture eapol and http packets.

I guess you should start with obtaining an adapter that supports monitor mode on your chosen platform? Google shows npcap, the capture library for Windows that is typically used, has a webpage with options: https://secwiki.org/w/Npcap/WiFi_adapters

Can someone please explain the reason?

The reason is that even though there is some capability within npcap and Windows to support monitor mode, it is very limited. HW options are limited; sometimes you can get some 802.11 frames but can't change channels; sometimes only low modulated (e.g. 802.11b/g) frames are picked up (which is a likely problem if you want http packets). Most times, the radiotap header does not contain useful metadata like RSSI, datarate, etc. All in all, Windows with npcap is a poor solution for wifi capture and it is not suitable for professional use (this is an opinion of course).

If, however, none of these limitations are important to you, then purchase a supported adapter and see if it meets your needs. It is still a valuable learning experience.

edit flag offensive delete link more

Comments

Thank you!

learner gravatar imagelearner ( 2023-12-08 14:19:32 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2023-12-08 06:25:37 +0000

Seen: 5,020 times

Last updated: Dec 08 '23