This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

wireshark monitor mode on Windows

0

I am using Windows 7 64bit edition and Intel(R) Centrino(R) Wireless-N 1030 q:why wireshark not working in Monitor mode and Microsoft Network Monitor 3.4 working fine wireshark in monitor mode I see only packets to and from my machine

asked 21 May '14, 14:13

mohammad's gravatar image

mohammad
1112
accept rate: 0%

edited 21 May '14, 15:00

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237


One Answer:

0

Because WinPcap does not support monitor mode.

Regards
Kurt

answered 21 May '14, 14:29

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

then why Microsoft Network Monitor 3.4 working fine

(21 May '14, 14:45) mohammad
1

what can I do?

Use a different OS (even in a virtual machine), use a different sniffer, buy an Airpcap adapter (please google it) or extend/modify WinPcap to support monitor mode.

(21 May '14, 14:57) Kurt Knochner ♦

thanks man

(21 May '14, 15:25) mohammad

then why Microsoft Network Monitor 3.4 working fine

As it does not use WinPcap.

Btw: Please don't change your comments totally, otherwise it's hard to follow the discussion. My first comment does not make any sense after your comment rewrite.

(21 May '14, 15:26) Kurt Knochner ♦

sorry .and thanks agan

(21 May '14, 16:02) mohammad

Hint: If a supplied answer resolves your question can you please "accept" it by clicking the checkmark icon next to it. This highlights good answers for the benefit of subsequent users with the same or similar questions. For extra points you can up vote the answer (thumb up).

(21 May '14, 21:46) Kurt Knochner ♦
showing 5 of 6 show 1 more comments