Ask Your Question

Revision history [back]

802.11 frames in monitor mode while associated

I want to record the 802.11 frames, and in particular association requests, of my MacBook Air (M1) while in monitor mode.

https://wiki.wireshark.org/CaptureSetup/WLAN tells me: "It's possible to capture in monitor mode on an AirPort Extreme while it's associated, but this necessarily limits the captures to the channel in use."

However, when I'm associated with my network and enable the monitor mode in the Wireshark capture options, I do not record any packages, while I stay associated with the network. When I disassociate and enable the monitor mode, I can record the 802.11 packages.

802.11 frames in monitor mode while associated

I want to record the 802.11 management frames, and in particular association requests, of my MacBook Air (M1) while in with my MacBook Air. So far, I'm able to detect the management frames of "other" devices, when I use the monitor mode.

However, https://wiki.wireshark.org/CaptureSetup/WLAN tells me: "It's possible to capture in monitor mode on an AirPort Extreme while it's associated, but this necessarily limits the captures to the channel in use."use." Hence, I think that a caputure of the wifi traffic in monitor mode while associated is what I'm looking for. As the new MacBook still uses the AirPort Extreme there should be a solution?

However, - when I'm associated with my a network and enable the monitor mode in the Wireshark capture options, I do not record any packages, while I stay associated with the network. When I disassociate and enable the monitor mode, I do not record any packages - when I'm not associated with a network and the monitor mode is enabled, I cannot associate with a network - when I use promiscuous mode instead, I can record the 802.11 packages.associate and disassociate but I do not get any management frames.

802.11 frames in monitor mode while associated

I want to record the 802.11 management frames, and in particular association requests, of my MacBook Air (M1) with my MacBook Air. So far, I'm able to detect the management frames of "other" devices, when I use the monitor mode.

However, https://wiki.wireshark.org/CaptureSetup/WLAN tells me: "It's possible to capture in monitor mode on an AirPort Extreme while it's associated, but this necessarily limits the captures to the channel in use." Hence, I think that a caputure of the wifi traffic in monitor mode while associated is what I'm looking for. As the new MacBook still uses the AirPort Extreme there should be a solution?

However, - when I'm associated with a network and enable the monitor mode, I do not record any packages - when I'm not associated with a network and the monitor mode is enabled, I cannot associate with a network - when I use promiscuous mode instead, I can associate and disassociate but I do not get any management frames.