This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'am trying to capture the traffic between an android smartphone and a wifi enabled photo camera, I have achieved it with some limitations using Wireshark 1.2.5 plus an AirPcap Classic USB 802.11b/g Adapter (capture only) but I have done the error of updating the Wireshark to the version 1.12.3

Now I can't see neither the android nor the camera but if I open one of the files with the traffic that I have captured with the version 1.2.5 and then I am going to capture from the new version I can see the android and the camera (but many packets of the traffic get lost).

I'm probably doing something wrong, someone can help me please?

Thanks!

asked 20 Mar '15, 03:45

andrew500w's gravatar image

andrew500w
6223
accept rate: 0%

You mentioned that you were able to capture some traffic with limitations with the previous version of Wireshark. Were you able to capture Data or QoS-Data between the Android smartphone and camera? Does the AirPcap WiFi adapter support 802.11n?

(20 Mar '15, 05:56) Amato_C

There is a version that supports 802.11n and is not the one I'm using, the version I use is the basic one and only supports 802.11b/g

With the first version of Wireshark I have managed to capture the traffic between the two devices but with limitations, I can see the traffic of the camera but I don't see the commands that the smartphone sends to the camera.

(20 Mar '15, 07:08) andrew500w

Is there a way you can post or send the PCAP file?

(20 Mar '15, 07:20) Amato_C

No problem I can send you the file ".pcapng" by mail, just giveme your address

(20 Mar '15, 08:10) andrew500w

would you mind to upload the file somewhere (dropbox, google drive, cloudshark) and to post the link here?

(20 Mar '15, 08:27) Kurt Knochner ♦

Is the MAC address of the Android phone = 3c:a1:0d:e5:6b:2e Is the MAC address of the camera = 90:b6:86:05:66:35

(20 Mar '15, 11:23) Amato_C

I will assume the above MAC addresses are the correct ones to analyze. In that case, the connection is made using 802.11n. This can be seen in the association request and association response frames. Also, the capture did not include EAP message #3 so decrypting the frames is also not possible.

(20 Mar '15, 12:28) Amato_C

So according to your opinion what can I do to be able to keep on trying?

(23 Mar '15, 01:55) andrew500w

Your answer has been converted to a comment as that's how this site works. Please read the FAQ for more information.

(23 Mar '15, 02:24) Jaap ♦

Hi andrew500w - to progress any further, you will need a WiFi adapter that supports 802.11n and works with Wireshark.

(23 Mar '15, 18:02) Amato_C

Hi Amato,

The AirCap NX supports 802.11n but for me it's impossible to spend $ 700, I'm using the AirPcap Classic because it belongs to a friend.

There is any way to use a wifi adapter like the D-Link DWA-182.A1 that supports 802.11a/g/n/ac?

Thanks

(24 Mar '15, 02:31) andrew500w

@andrew500w

Your "answer" has been converted to a comment (again) as that's how this site works. Please read the FAQ for more information.

(24 Mar '15, 03:34) grahamb ♦

Hi andrew - the D-Link DWA-182.A1 WiFi adapter will be able to capture 802.11n traffic, but will the driver support capturing WiFi traffic?

For that question, please read the Wireshark Wiki for capturing WiFi traffic: https://wiki.wireshark.org/CaptureSetup/WLAN

Also, if you are using Windows, Netmon may also be an option.

(24 Mar '15, 08:47) Amato_C

Hi Amato,

Thanks a lot for your help, I will read the information in detail.

(24 Mar '15, 09:08) andrew500w
showing 5 of 15 show 10 more comments
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×2
×1

question asked: 20 Mar '15, 03:45

question was seen: 787 times

last updated: 24 Mar '15, 09:08

p​o​w​e​r​e​d by O​S​Q​A