Trouble Receiving Wireless Traffic from Other Devices on Network

asked 2018-12-20 19:34:17 +0000

ezlikespie gravatar image

updated 2018-12-21 15:26:50 +0000

Hello, I am having problems capturing traffic sent between devices other than my own on my network. I am running Wireshark 2.6.2 64-bit on Windows 10. Originally, I was using the WinPCap library, but after reading this article, I removed WinPCap and installed Npcap so monitor mode would work. I'm not 100% certain if monitor mode is necessary to accomplish this, but other articles pointed in this direction. Ideally, I'd like to be able to capture wireless traffic sent between other devices on my network, specifically HTTP packets. Thanks for any help.

Edit: I have recently been able to capture a small amount of traffic from my phone when capturing on my laptop. But the only traffic I am capturing is in the form of mDNS packets.

edit retag flag offensive close merge delete

Comments

Yes, from what I understood I needed to enable monitor mode in order to capture packets from other devices. I read that WinPCap did not support monitor mode, so i installed Npcap. Whether enabling monitor mode was necessary or if I was even able to enable it by installing Npcap is a mystery to me.

ezlikespie gravatar imageezlikespie ( 2018-12-21 00:15:26 +0000 )edit

If your network is "protected" - i.e., if traffic is encrypted using WEP or WPA/WPA2, so that it can't be sniffed without knowing the network password - you also should read the page about decrypting protected 802.11 traffic.

Whether enabling monitor mode was necessary

If you want to capture traffic between devices other than my own on my network, it is necessary.

Edit: I have recently been able to capture a small amount of traffic from my phone when capturing on my laptop. But the only traffic I am capturing is in the form of mDNS packets.

Does Wireshark show those packets with Ethernet headers or 802.11 headers?

Guy Harris gravatar imageGuy Harris ( 2018-12-21 20:06:11 +0000 )edit