New here with a lot of questions

Greetings all, I have wireshark on a usb bootable "wifislax" flash drive that i have been struggling for over a month on and off to fully understand. First, none of my intended uses are malicious in nature.

I have set up a fake/fictitious "AP" with "linset" (part of wifislax) which will deauthenicate a user(s)on a wifi network OTHER THAN MINE. This practice will cause the "bounced" user to re-log back in to continue net use.

Using wireshark and selecting the proper interface as well as promiscuous mode, i am unable to load/display cookies even though i am using the correct "expression(s)". What am i doing incorrectly?

NEXT, would there be a difference if the "user" was using a cell/smart phone as opposed to a computer?