This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Can’t turn on monitor mode on macbook pro with Wireshark 1.99.9

0

Can anyone tell me why I am getting this error message when trying to capture in monitor mode over Wifi (En1) ? I do not get this error until I enable monitor mode. I am trying to capture all traffic on the network.
"Unable to set data link type on interface 'en1' (EN10MB is not one of the DLTs supported by this device)."

asked 31 Oct '15, 19:03

nikonshooter7's gravatar image

nikonshooter7
6112
accept rate: 0%

edited 06 Nov '15, 14:14

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196

What version of Wireshark are you using? There were, as I remember, some bugs that could cause this.

(01 Nov '15, 00:57) Guy Harris ♦♦

I am on version Version 1.99.9

(03 Nov '15, 18:18) nikonshooter7

One Answer:

0

What happens if you try version 2.0.0rc2?

answered 03 Nov '15, 19:19

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Will try that now and report back

(03 Nov '15, 20:14) nikonshooter7

Success! Thank you, upgrading to the version 2.0.0rc2 solved the issue

(06 Nov '15, 13:55) nikonshooter7

With version 2.0.0 (stable 18nov15, on a MacBook-10.7) I found that if I changed the settings for the interface (to enable monitor mode) then restarted the app then I could get it into monitor mode after it restarted. Awkwardly enough I seem to have to repeat the procedure to get it capture in non-monitor mode.

(23 Dec '15, 05:29) pierz

As I posted elsewhere - 2.0 didn't do monitor mode 1.12 did 2.0 couldn't be uninstalled apparently re-installing 1.12 said it installed, but was not there. 2.01 says it installed but is not there - even though 2.0 was thrown away 1.12 cannot be re-installed We were told at Sharkfest you could have both 1 and 2 Now I can’t even get 1.12 back

(31 Dec '15, 12:54) packetlevel