I have been trying to capture the wireless traffic using old wireless cards (Trendnet, TP-Link) etc. But am unable to capture the traffic other than my own. Can someone please guide as to how to set up the wireshark to capture on monitor mode (including how to set up the wireless card). I have tried implementing suggestion from various bogs and forums and am yet to get the required results. I am using a Belkin wireless router and enabled the WPA-WPA2 personal. and have set it on a channel.
asked 23 Oct '13, 23:53
edited 15 Sep '14, 22:35
Guy Harris ♦♦
Please try the following steps:
Run the following commands
Do you see a wlan0 or wlan1 interface?
If no, your wireless card is not recognized by your kernel and there is nothing Wireshark can do about it. Stop here and ask the the people in the user forum of your Linux distribution (Ubuntu, Fedora, etc.) how to add a working driver for your wireless card.
If you do see wlan0/1, proceed with
depending on which wireless interface you want to capture. That command should report the following message:
Now, capture on mon0 with tcpdump and/or dumpcap.
Then open that file with Wireshark
If any of the above does not work, please post the exact error message as a comment to my answer.
answered 28 Oct '13, 08:29
Kurt Knochner ♦