I recorded all Wifi traffic at my customer with Wireshark.
Hello,
I recorded all Wifi traffic at my customer with Wireshark.
When I use for example the filter in order to see the specific traffic on this MAC address: eth.addr == 94:fb:29:24:77:cd
I don't see any traffic... and the Wireshark's dashboard is blank.
Many thanks for your help,
It's likely then that you didn't capture any traffic with that MAC address.
You can see all the MAC addresses in the capture by looking at the Endpoints dialog via Statistics -> Endpoints and then selecting the appropriate tab.
Many thanks for your answer but:
If I go to Endpoints and I select the appropriate tab like IEEE 802.11, I found my mac address: 94:fb:29:24:77:cd which contents 2,939 Packets.
And if I want to look for this Mac address with this filter eth.addr == 94:fb:29:24:77:cd
I don't find any traffic with Wireshark's dashboard.
I would like to add one thing: the Mac address is a WIFI Mac address.
Is the command/ syntax: eth.addr == 94:fb:29:24:77:cd correct ?
Again thank you
@Francois02, I've moved your "answer" to a comment as that's how this site works.
The field you're using for your filter is incorrect, I was partially correct in that your capture didn't contain any Ethernet (802.3) MAC addresses with that value, as presumably they are all 802.11 MAC addresses.
Try using wlan.addr to filter on WiFi MAC addresses.
Big thanks It works with your command like wlan.addr==94:fb:29:24:77:cd.
Asked: 2019-02-20 16:52:47 +0000
Seen: 4,411 times
Last updated: Feb 20 '19
