This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

A new user of wireshark here. I use Wireshark on Kali Linux- I have one network adapter and a wireless usb adapter- Alfa Network. I am able to enable the alfa card for monitor mode. It is a card that is capable of monitoring and injection. However, when I select the capture interface on Wireshark as mon0 or wlan0, it captures the broadcast traffic that other wireless network is sending( not quite sure what the right term here is). I have a laptop using the wifi network as well as my mobile phone but could not capture any related traffic such as http or post. What am I doing wrong here? Should I not use my ethernet during this? I am running as root (although I know it is advise against it). Will running as root causes issues for capture?- Please help/advice. Really appreciate it!

asked 06 Nov '13, 06:48

gurushiva's gravatar image

gurushiva
1112
accept rate: 0%


see my answer to a similar question.

http://ask.wireshark.org/questions/26347/unable-to-capture-wireless-traffic-on-monitor-mode-on-ubuntu-1004-version

Did you follow those steps?

Regards
Kurt

permanent link

answered 07 Nov '13, 01:59

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

Yes, I have been able to airmon-ng wlan0. I notice that if I am connected by the ethernet- I cannot use wlan0 just for capturing. I think i have misunderstood the concept here. If Im connected using wireless connection- all works well (I have yet to do more tests on the packets). However, if I am using a wired connection, I cannot use just use wlan0 for capturing. Assuming this is how the whole concept works, yes?. Please advice. Thank you.

(07 Nov '13, 06:52) gurushiva

However, if I am using a wired connection, I cannot use just use wlan0 for capturing.

I'm not sure what you mean by this, however: if you capture on wlan0 you will only see your own wifi/wlan traffic. If you capture on mon0 you should see traffic of other clients as well, that communicate on the same wifi/wlan channel.

(07 Nov '13, 07:38) Kurt Knochner ♦

What I meant- Can I be using a wired connection to have myself connected to the Internet but at the same time- use wlan0/mon0 to monitor clients using my wifi?- Thank you

(07 Nov '13, 08:10) gurushiva
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×549
×293
×139
×3
×2

question asked: 06 Nov '13, 06:48

question was seen: 25,850 times

last updated: 07 Nov '13, 08:10

p​o​w​e​r​e​d by O​S​Q​A