This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Viewing RSSI value using wireshark windows version

0

I try to view RSSI value in wireshark windows version (v1.8.5). So what is the first thing that I should do? Thx

asked 12 Feb '13, 15:57

awi216's gravatar image

awi216
10336
accept rate: 0%


One Answer:

1

The first thing that you should do is either

  • download and install Microsoft Network Monitor, use it to capture traffic, and either read its captures in Network Monitor or save them and read them in Wireshark;
  • buy an AirPcap adapter and use it to capture traffic in Wireshark

WinPcap doesn't support capturing in monitor mode, or capturing with any radio information such as signal strength, with regular 802.11 adapters, and Wireshark uses WinPcap for traffic capture on Windows, so Wireshark doesn't support getting radio information when capturing on Windows unless you have an AirPcap adapter.

(I guess a third thing you could do is "download some version of Linux or *BSD and install it on your machine", but that's probably a less convenient alternative. :-))

Note, by the way, that the "RSSI" value might not show up in a column in the packet list, and, in the packet details, might be a signed value, either in decibels from some arbitrary reference point (dB) or in decibels from 1 milliwatt (dBm), rather than the unsigned "RSSI" values referred to by some places in the IEEE 802.11 specification. Those unsigned values might not be available on many platforms (and are not, as far as I know, any more useful than the decibel values).

answered 12 Feb '13, 17:23

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Thx for reply

Actually, right now I already doing what u have suggested, exclude the AirPcap adapter. And will choose what is the best method, to get the best result. I have seen someone from google using Wireshark and get the RSSI value, and it look neat and proper :)

(13 Feb '13, 15:21) awi216

They might have gotten it either by capturing on Linux or OS X or *BSD, or by reading a capture file from some other application.

(13 Feb '13, 16:51) Guy Harris ♦♦