Bob Jones's profile - activity

both phone and printer are on same wifi (different channels) and connected to access point. my printer is w

Could the Android 11 devices be using a more advanced modulation as compared to the other devices? If so, you will stru

Have you seen the security page - it might guide you into some best practices. https://wiki.wireshark.org/Security ...

Have you seen the security page - it might guide you into some best practices. https://wiki.wireshark.org/Security

Did you isolate the source of these? Is your RaspberryPI sending them? Or is another entity on the network sending the

Do you explicitly set the destination MAC in scapy and it is getting overwritten?

I assume you are using a monitor mode adapter? And that you are not using the same adapter to connect to the AP and als

Good to know! Do you have any HE clients? I would be interested in comparing an HE capture from the MAC against the In

Did you mean SSL/TLS or SSH? My SSH protocol preference does not have this field, though TLS does, as @GrahamB points o

Have seen Airtool? Much simpler if it works in your environment - don't know if the new processor is a problem or not.

Have seen Airtool? Much simpler. The early version was free and I could still find via google.

my smartphone seems to use 5 ghz If the traffic you want to capture is on a 5GHz channel, then the capturin

Wifi6 is HE now, where VHT is WiFi5. If your clients and AP supports HE, wireshark can show HE modulated frames if capt

Wifi6 is HE now, where VHT is WiFi5. If your clients and AP supports HE, wireshark can show HE modulated frames if capt

Wireshark has many parameters defined (1000s?). Exactly which one are you having issues with? You might want to share

If that frame has a bad FCS, decryption probably will not work. Try to get another set of eapol frames from the handsha

With the capture file and key you provided, we can explain what you will/won't see in your environment. I think the dec

Do you have the monitor mode check box set in capture --> options? Maybe: you start Wireshark, it puts the adapter i

If you were able to capture in monitor mode with Windows10, I consider you fortunate. I suspect this is an npcap issue

There are possibly some clues in the capture file that can provide evidence to support, though may not prove, that a par

Be sure you cover the 'gotchas' from the wiki: https://wiki.wireshark.org/HowToDecrypt802.11

Macbooks or Linux systems are typically the way to go. 802.11 capture on Windows is difficult. Even if you can get A

WireShark doesn't show me a signle HTTP packet I guess your first problem is capturing traffic correctly before you eve

You want to look at the RSN IE (information element): Tag: RSN Information Tag Number: RSN Information (48) Tag l

You want to look at the RSN IE (information element): Tag: RSN Information Tag Number: RSN Information (48) Tag l

You want to look at the RSN IE (information element): Tag: RSN Information Tag Number: RSN Information (48) Tag l

Best thing to do is to grab the probe and association requests/responses for the devices under review (i.e. the devices

There are 2209 packets that contain TCP in the 'short' capture; try the following filter: tcp I don't know if this is

Did you turn the interface back on manually?

Did you turn it back on manually?

You probably want a display filter on TCP (or UDP) port. Most applications will use a specific port along with protocol

Did you turn off the Network Manager?

Signal strength is very high.

I am able to pickup some data frames with this filter: wlan.addr == 94:65:2d:2c:aa:79 and wlan.fc.type_subtype in {0x20

Here are some instructions: https://nmap.org/npcap/guide/npcap-users-guide.html Frankly, though, npcap for Windows mon

I have a pi device: cat /sys/firmware/devicetree/base/model Raspberry Pi 3 Model B Plus Rev 1.3 I followed the instru

I have a pi device: cat /sys/firmware/devicetree/base/model Raspberry Pi 3 Model B Plus Rev 1.3 I followed the instru

Key messages 1 and 3 are transmitted by the authenticator (access point) when using WPA2. I can make two guesses why yo

Is this wired or wireless?