This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

i used the filter http.request.method=="POST" on wifi network.when i filled the login of unsecured website on my machine itself it displayed the POST request but when i used my android mobile to do the same it didnt show anything,...

asked 04 May '15, 03:10

Money's gravatar image

Money
2112
accept rate: 0%

1

Are you capturing in monitor mode (or with an AirPcap adapter on Windows)?

Is this a "protected" network, using WEP or WPA/WPA2?

What do you see if you don't filter the display? Do you just see a bunch of "802.11" packets that are 802.11 data frames with the "Protected" bit set in the Frame Control field?

(04 May '15, 15:17) Guy Harris ♦♦

Yes i m capturing in monitor mode and if i dont apply the filter i can see a bunch of encrypted packets . And as i wrote earlier i am able to intercept post request going from the machine itself but not of others....

(04 May '15, 20:01) Money

Presumably the adapter is decrypting packets sent to the machine doing the capturing, but not other packets. Wireshark will have to decrypt the other packets itself; you will, at minimum, need to supply it with the password for your network, and will probably also need to capture the initial "EAPOL handshake" for the Android phone when it joins the network, for example, by turning the phone off and on again while you're capturing.

See the Wireshark Wiki's "how to decrypt 802.11" page for more details.

permanent link

answered 04 May '15, 20:14

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×1,620
×549
×139
×31

question asked: 04 May '15, 03:10

question was seen: 2,146 times

last updated: 04 May '15, 20:14

p​o​w​e​r​e​d by O​S​Q​A