I am new to wireshark. I am trying to capture wireless traffic on one specific channel using wlan.channel filter. But it is not working. I am using version 1.8.7 for wireshark. Can you please let me know exact filter to be used for the same? asked 24 May '13, 00:28  RajeAmit |
One Answer:
"wlan.channel" is a display filter, and cannot be used to control what channel you're capturing on. There's no way to specify, with a capture filter, a channel on which to capture. (If you already have a capture that includes traffic on multiple channels, and want to display only the traffic on a particular channel, there are display filters that can, in some cases, be used for that, but the filter to use currently depends on the capture file format and the "radio header" format if the file format is pcap or pcap-ng.) On Linux, in one of the 1.10 release candidates, you may be able to control the channel on which you're capturing using the wireless toolbar; the wireless toolbar isn't supported in 1.8.x or earlier releases. You might need to enable the wireless toolbar from the "View" menu. On Windows, you'd need an AirPcap adapter, and it has its own toolbar to control the channel. With earlier releases of Wireshark on Linux, or on OSes other than Linux and Windows, you will probably need to set the Wi-Fi adapter channel on the command line using a system command. answered 24 May '13, 14:00  Guy Harris ♦♦ |
