This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi everyone,

I'm stuck here. Trying to sniff packets to/from a phone whose WiFi is associated to my AP using a laptop with Wireshark associated on the same network.

I've configured Wireshark with my AP's WPA password/SSID, and I can even see the 4 Key messages passed between my phone's WiFi and the AP. However, from that point on, I only see "request-to-send" and "clear-to-send" frames to/from the phone and AP. Why am I not seeing any datapackets (as I browse to clear HTTP sites from my phone).

I'm running Ubuntu 12.10 with a Ralink 2573 USB dongle that appears to be able to put successfully in monitor mode by running airmon-ng (as I can see other frames on the 802.11 network).

Any help or thoughts would be appreciated. Thanks in advance.

Greg

asked 13 Mar '13, 16:14

gjbrault's gravatar image

gjbrault
11112
accept rate: 0%

Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×134
×73
×4
×3

question asked: 13 Mar '13, 16:14

question was seen: 2,535 times

last updated: 13 Mar '13, 16:14

p​o​w​e​r​e​d by O​S​Q​A