Ask Your Question
0

I can not see any traffic when I filter my device's MAC address

asked 2019-02-20 16:52:47 +0000

Francois02 gravatar image

updated 2019-02-20 18:17:07 +0000

cmaynard gravatar image

I recorded all Wifi traffic at my customer with Wireshark.

Hello,

I recorded all Wifi traffic at my customer with Wireshark.

When I use for example the filter in order to see the specific traffic on this MAC address: eth.addr == 94:fb:29:24:77:cd

I don't see any traffic... and the Wireshark's dashboard is blank.

Many thanks for your help,

edit retag flag offensive close merge delete

1 Answer

Sort by ยป oldest newest most voted
0

answered 2019-02-20 17:21:24 +0000

grahamb gravatar image

It's likely then that you didn't capture any traffic with that MAC address.

You can see all the MAC addresses in the capture by looking at the Endpoints dialog via Statistics -> Endpoints and then selecting the appropriate tab.

edit flag offensive delete link more

Comments

Many thanks for your answer but:

If I go to Endpoints and I select the appropriate tab like IEEE 802.11, I found my mac address: 94:fb:29:24:77:cd which contents 2,939 Packets.

And if I want to look for this Mac address with this filter eth.addr == 94:fb:29:24:77:cd

I don't find any traffic with Wireshark's dashboard.

I would like to add one thing: the Mac address is a WIFI Mac address.

Is the command/ syntax: eth.addr == 94:fb:29:24:77:cd correct ?

Again thank you

Francois02 gravatar imageFrancois02 ( 2019-02-20 18:25:56 +0000 )edit

@Francois02, I've moved your "answer" to a comment as that's how this site works.

The field you're using for your filter is incorrect, I was partially correct in that your capture didn't contain any Ethernet (802.3) MAC addresses with that value, as presumably they are all 802.11 MAC addresses.

Try using wlan.addr to filter on WiFi MAC addresses.

grahamb gravatar imagegrahamb ( 2019-02-20 18:43:51 +0000 )edit

Big thanks It works with your command like wlan.addr==94:fb:29:24:77:cd.

Francois02 gravatar imageFrancois02 ( 2019-02-20 18:56:08 +0000 )edit

If an answer has solved your issue then please "accept" it by clicking the checkmark icon to the left of the answer.

grahamb gravatar imagegrahamb ( 2019-02-20 19:13:00 +0000 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2019-02-20 16:52:47 +0000

Seen: 82 times

Last updated: Feb 20