This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireless router traffic

I am trying to capture all data that goes through my router to the cable modem (e.g. capture all traffic from PC's connected to my wireless router).

From what I understand this is possible with Wireshark, but I am unable to figure it out (I am not a techie).

I am running Mac OS X 10.5.8 and using a linksys WRT54 router if that makes any difference.

Can anyone explain (in layman) terms how I can achieve this?

The reason for this is that I have multiple computers connected to my wireless router nearly all the time. I have tried to secure my router using mac filtering, passwords and a mixture of both, but for some reason within a few hours to a few days all settings are back to factory defaults. I don't know if this is just the router (it is quite a few years old now, but can't afford a new one atm) or if it is someone who is using my network doing this).

Please can anyone help me?

wireless router traffic

asked 18 May '11, 10:11

60seconduser
1●1●1●1
accept rate: 0%

One Answer:

There are a few ways to accomplish this.
1). you can install an ethernet HUB, (not switch), between your cable modem and router, so that you can capture all packets to and from your network. 2). you can use an "airpcap" adapter to capture wireless traffic, using the WLAN and Radiotap filters available in Wireshark to narrow down potential connection problems. I use the WRT style wireless routers also. For securing your wireless router, WEP has been the standard, but I've recently read that WPA2 actually encrypts the entire frame and is more secure, you might consider reconfiguring for that. If you feel the MAC filtering you're using is possibly not working, I would flash your router with the latest BIOS. I've found many units sold are not up to the latest available BIOS. You can download the BIOS free and flashing is easy.

Hope that gets you in the direction you're looking for. John

answered 19 May '11, 05:37

John_Modlin
120●5
accept rate: 0%