I am running Kali linux and I have a TP-Link USB adapter. I have also started airmon-ng for the wlan adapter, then selected it in Wireshark and started a capture. I can see all sorts of broadcast traffic on the 802.11 network but if I want to filter with something like tcp.port==80 that won't work. I have a test laptop next to me and I would like to be able to see the HTTP traffic that is sent from that when they are both connected to the same network
Is there a way I can get the card to see the actual protocol being used as it does when connected via ethernet? Right now the whole protocol column is 802.11 instead of seeing things like HTTP, HTTPS, SNMP, etc.
asked 21 May '14, 06:08
sounds like your wifi traffic is encrypted. Do you have to enter a password while you connect to the wifi network?
If so, please read the wifi/wlan decryption Wiki.
answered 25 May '14, 11:30
Kurt Knochner ♦