Wireshark monitor mode question, Windows 11
This is on Windows 11 with the wireless adapter ORiNOCO 802.11n USB (driver ver 3.5.0.14), which is advertised on Npcap/WiFi adapters - SecWiki to support monitor mode and work on Windows 10 & 11 with Wireshark.
Using Wireshark 4.4.1 which includes Npcap version 1.79. Npcap installed with the option “Support raw 802.11 traffic (and monitor) for wireless adapters.” Wlanhelper has been used to place the wireless adapter into monitor mode, and the Monitor Mode checkbox in Wireshark for the adapter has been checked.
Wireshark only captures broadcast traffic from the wireless adapter. No other packets are being captured. Any thoughts about getting it to capture packets beyond broadcast packets? TY!
It sounds as if the adapter is not in promiscuous mode; this is not unheard of. The wireless interfaces usually behave different than wired so the check box to enable promsic mode in Wireshark will likely have no effect (but of course try it if you haven't already). Possible solution could be to get new drivers either through NPCAP or drivers for the device. Or change adapters. Or better yet, change platforms to Linux or MacOS where monitor capture is significantly better.
Windows is a poor system for monitor mode capture so expect significant difficulties.