Hi My name is Satwik and I have a AirPcap adapter with me. I currently need to examine few Wireless IP packets and observe their QOS values. I have installed my AIRPCAP adapter andwhile running wireshark it seems to show only beacon frames. Somehow I dont see any actual data packets(say RTP packets/SIP signalling packets). I contacted the Riverbed support team(AirPcap) and they said the hardware has nothing to do with it. Is there a specific Wireshark version I need to use to make this work.Or is there a specific setting I need to make ? Suggestions would be helpful asked 25 Jun '13, 06:56  Satwik |
One Answer:
If this is a protected network (WEP or WPA/WPA2), you'll need to tell it the password for the network (and, for WPA/WPA2, will have to see the EAPOL exchange when the machine whose traffic you're trying to see joins the network). answered 25 Jun '13, 16:02  Guy Harris ♦♦ Hi I somehow got it working.Dont know how it started working though.I will try to figure out the root cause and post it here.(Just in case it turns out to be useful to someone else) (25 Jun '13, 16:32) Satwik |
are you capturing on the correct channel on your WiFi and do you have the correct AirPcap Adapter for your wireless technology? Do you use 802.11a/b/g or n?
Hi I am currently listening on 802.11 b/g on channel 6 and I checkd the same on the AP side too. Does the presence of beacon frames gurantee that I am listening in the right channel ? Is there something else I need to check ? Thansk and regards Satwik
You have to see the beacon frames coming from the associated AP where you want to capture from. If you see those and don't have channel hopping but really using a fixed frequency you should be good