Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] Capture traffic in monitor mode - only broadcasts

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: "S.A. Moeys" <basmoeys@xxxxxxxxx>
Date: Thu, 3 Apr 2008 01:22:19 +0200

Hello,

I've been desperately trying to capture all WLAN traffic on my home network. I'm using a MSI laptop with an integrated MSI ralink wlan adapter. I'm running linux/ubuntu. I'm not sure about which driver is installed, but it seems to work ok.

I put the wlan adapter on monitor mode and adjusted the channel to the one my router is broadcasting through, using iwconfig. In wireshark, it captures a lot of packets, but they're all broadcasts from a the access point. It's on the right SSID and the right channel, but apart from a few occasional SMC broadcasts I can't capture any traffic on the network.

These broadcast packets are useless I guess. Is the problem port related and if so, what to do?

Summarized:
-running linux
-adapter is in monitor mode
-adapter is on right channel
-only capture broadcasts, no actual traffic

Look forward to hearing from you.

Regards,
Sebastian


 
  • Follow-Ups:
    • Re: [Wireshark-users] Capture traffic in monitor mode - only broadcasts
      • From: Joerg Mayer
  • Prev by Date: [Wireshark-users] ipv6 multicast packet in tshark-1.0.0
  • Next by Date: Re: [Wireshark-users] Capture traffic in monitor mode - only broadcasts
  • Previous by thread: [Wireshark-users] ipv6 multicast packet in tshark-1.0.0
  • Next by thread: Re: [Wireshark-users] Capture traffic in monitor mode - only broadcasts
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation