Sunday, April 28, 2024
 Popular · Latest · Hot · Upcoming
2
rated 0 times [  2] [ 0]  / answers: 1 / hits: 17522  / 3 Years ago, mon, september 13, 2021, 2:47:57

I've installed Wireshark and configured it to let my user run it with all needed privileges (I enabled dumpcap and added my user to wireshark group, then restarted).



Devices are shown and capture starts well. The problem is that only packets sent to and directed to the PC where Wireshark is running are captured. Obviously I enabled Promiscuous mode in the capture options dialog.



For example, if I run Wireshark and then surf the web on Firefox, packets are captured. If I start browsing with my smartphone, instead, no packet is captured (PC and smartphone are connected to the same domestic WiFi network).



I'm working with a WiFi device wlan0 with ath9k drivers. Here you are the output of ifconfig wlan0 and lspci | grep Wireless:



lorenzo@XUBUNTU:~$ ifconfig wlan0
wlan0 Link encap:Ethernet HWaddr 5c:ac:4c:32:dc:1d
indirizzo inet:192.168.1.100 Bcast:192.168.1.255 Maschera:255.255.255.0
indirizzo inet6: fe80::5eac:4cff:fe32:dc1d/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1585 errors:0 dropped:0 overruns:0 frame:0
TX packets:1782 errors:0 dropped:0 overruns:0 carrier:0
collisioni:0 txqueuelen:1000
Byte RX:970355 (970.3 KB) Byte TX:401610 (401.6 KB)

lorenzo@XUBUNTU:~$ lspci | grep Wireless
03:00.0 Network controller: Atheros Communications Inc. AR9287 Wireless Network Adapter (PCI-Express) (rev 01)


What I want to achieve is to examine the network traffic of my smartphone using my PC running Wireshark, both connected to the same personal domestic WiFi access point.



Please help me!!


More From » wireless

 Answers
5

This "problem" is related to the netwrok architecture (hardware). Routers these days are switches and not hubs, thus you see only traffic to your box.



You need to configure your network, there are several options, the wireshark guide goes through the issues quiet well.



http://wiki.wireshark.org/CaptureSetup/Ethernet



Personally I use a switch with a monitoring port, but you and add an additional router.



Sort of the bottom line is you need to configure your network to be able to monitor other clients.


[#41269] Tuesday, September 14, 2021, 3 Years  [reply] [flag answer]
Only authorized users can answer the question. Please sign in first, or register a free account.
oleard

Total Points: 344
Total Questions: 105
Total Answers: 113

Location: Bonaire
Member since Tue, Sep 20, 2022
2 Years ago
oleard questions
Mon, Sep 26, 22, 18:21, 2 Years ago
Mon, Nov 1, 21, 21:27, 3 Years ago
Sat, May 7, 22, 20:47, 2 Years ago
Sun, Oct 2, 22, 01:10, 2 Years ago
;