Can't sniff some packets

asked 2018-09-23 14:16:25 +0000


So I'm trying to diagnose the communication between a camera(with wifi) that I have, to an application in my android phone. I'm trying to do it by MITM with WireShark in my PC. The connection goes like this: image description

The PC is connected to the camera's hotspot, and the phone is connected to the PC's hotspot(which means the phone and the cameras are connected indirectly).

The communication is working - when I press the capture button in the phone it does take a pic in the camera. But when I try to sniff this "take an image" packet in WireShark I can't see it. Actually, I don't see any packet from the phone). I do see all along packets from camera) - which is the live stream packets.

Why can't I see the packets from my phone to the camera?

Thanks, Halfon

edit retag flag offensive close merge delete


Exactly what does "it does take a pic in the camera." mean? Is it stored in the camera? Or on the phone? So, is the use case that the phone acts as (remote) viewfinder of the camera, as well as remote shutter?

Other question, how have you setup the Wireshark capture? What OS is this PS running? etc..

Jaap gravatar imageJaap ( 2018-09-23 19:45:37 +0000 )edit

It is stored in the camera, the phone is only used as a remote control. I want to understand that communication to make a better application(for example - since I get live stream from the camera, to take a pic and store it in my phone instead of the camera, or make the option to make a time lapse). I'm using windows 10. What do you mean how did I setup the Wireshark capture? I did nothing but chose the WIFI-card network and started to sniff :3

Halfon3100 gravatar imageHalfon3100 ( 2018-09-23 19:52:27 +0000 )edit

There are several things unclear. From your picture it seems that you have two wireless cards in your PC, one working as a STAtion connected to camera's AP and another one running in AP mode to which the mobile phone is connected as STAtion. Is that the case? If yes, do you sniff at both or only at one of them? Is the PC configured for "internet connection sharing" where its STA interface is the "connection to the internet" and the AP as the "LAN side"? Because "internet connection sharing" includes NAT, so at the STA side, packets actually coming from your mobile phone are seen as coming from the PC.

sindy gravatar imagesindy ( 2018-09-26 18:54:22 +0000 )edit