This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi - I'm trying to figure what HTTP commands are being sent to my IP speakers. I've got most of what I want using firefox inspector on my laptop and the 'airstudio' site on(?) my speakers. For instance the command for speakers to pickup auxillary jack is GET,http://192.168.1.82:8889/aux. The command I cant capture is volume up/down. I cant send volume up/down from my laptop as the UI only has a slider control and only captures an absolute value (that looks like this GET,http://192.168.1.82:8889/VOLUME$VAL$64). What I want is the command that gets sent when using phone/tablet volume control as these both have physical volume buttons that the speakers respond to. The speakers are on 192.168.1.82 and the tablet on 192.168.1.126 which i've confirmed on router page. So I fired up Wireshark and pointed it at SpezzaNet wifi. Then I added this filter; "ip.src==192.168.1.126 AND ip.dst==192.168.1.82". Then Wireshark goes all quiet. Clearly I've got something wrong but not sure what. Help appreciated! :-/

asked 03 Jun '14, 12:44

spezzer's gravatar image

spezzer
1223
accept rate: 0%

what is your

  • OS and OS version?
  • Wireshark version?
  • wlan/wifi interface on the capturing system?
  • did you enable monitor mode on the wlan interface?
(03 Jun '14, 14:26) Kurt Knochner ♦

Hi Kurt

OS: Windows 7 HOme Premium SP1 WS: Version 1.10.5 (SVN Rev 54262 from /trunk-1.10) Wifi: 802.11b/g/n Enabled: Not sure - dont seem to have an option on Router or am I looking in wrong place? Would that be relevant when sniffing wifi?

Also - I can see loads of other traffic. I have to admit though an awful lot of it is on .71 which is my laptop where I'm running WS.

(04 Jun '14, 11:04) spezzer

OS: Windows 7 HOme Premium

O.K. you cannot use Wireshark to capture wifi/wlan traffic on Windows in monitor mode (meaning: capture traffic of other wlan/wifi clients), as WinPcap (the capturing subsystem) does not support monitor mode on Windows.

Your options are:

  • buy an Airpcap adapter (please google it)
  • use a different (commercial) sniffer on Windows that supports monitor mode (please google it)
  • do the wlan/wifi capturing on Linux, e.g. Kali Linux (please google it)

Regards
Kurt

permanent link

answered 05 Jun '14, 12:52

Kurt%20Knochner's gravatar image

Kurt Knochner ♦
24.8k1039237
accept rate: 15%

edited 05 Jun '14, 12:52

Hi - Airpcap is a pricey piece of kit - so does a commercial sniffer by the sound of it. I've got a spare drive in a desktop I can use for a Linux boot - are you saying that there is a version of WS that will run on Linux and give me the results I'm looking for?

(07 Jun '14, 03:09) spezzer

As I said: Kali Linux. You can boot it from a cdrom or flash drive.

(07 Jun '14, 13:55) Kurt Knochner ♦

Other options are: - Enable routing on the capture system and use ARP spoofing. - Wire the capture system into the path (requires two interfaces) and configure it as a bridge.

permanent link

answered 06 Jun '14, 00:39

TimB's gravatar image

TimB
1
accept rate: 0%

thanks TimB but sounds a little beyond my capabilities!

(07 Jun '14, 03:10) spezzer
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×293
×184
×178
×134
×23

question asked: 03 Jun '14, 12:44

question was seen: 12,311 times

last updated: 07 Jun '14, 13:55

p​o​w​e​r​e​d by O​S​Q​A