Hi to all! I have next situation. My home computer has 100 Mbit cabel internet connection. Cabel from internet provider connected to network card in my PC. I have real IP address (for example 150.140.130.120) Also I have simple USB wifi modem witch can work as access point. I use Connectify Hotspot software to share my internet connection via wifi to other people and for my mobile devices also. All users who connected to my wifi have IP address 192.168.77.xxx) My task: I want to see what web-sites users of my wifi point visits. I start Wireshark to capture packets from both interfaces (1st - is my real network card with internet cabel from my provider; 2nd - my wireless connection (it is created automatically by Connectify hotspot)). On both interfaces packets count permanently increases, little bit faster on real network connection, that is right. In the list of captured packets in Wireshark I see all HTTP GET\POST queries and Full request URI. I use this filter: http.request and http.request.method != M-SEARCH But I have one big problem... In all packets Source address is identical. And it equal IP address of my PC (150.140.130.120). I can Please, help me to solve this problem. Thanks in advance! asked 17 Nov '13, 11:51  SergeyV |
One Answer:
O.K. apparently Connectify creates a 'virtual' interface that Wireshark is able to capture traffic, otherwise you would not see the counter increase on both interfaces. However as you don't see the internal addresses (192.168.77./24) I assume that WinPcap (the capture library of Wireshark) get only the already translated (NATed) packets from the 'virtual' interface. If that's the case, there is nothing you can do in Wireshark (configuration) to make it work, as it's apparently a limitation of Connectify. To be absolutely sure, I suggest to capture only on the 'virtual' wifi interface and then check if you see any addresses from the network 192.168.77.0/24. BTW: A similar problem with Connectify has been reported earlier.
Only solution in your environment: Get another PC/Laptop and capture the wifi/wlan traffic instead of the interfaces on the PC with Connectify. Regards answered 17 Nov '13, 17:16  Kurt Knochner ♦ edited 17 Nov '13, 17:17 |
