This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I am new to wireshare. I set it up yesterday on my mac and enabled promiscuous mode. I connected both my mac and android phone to my home wifi. I am able to see all packets for the mac. However, I am not seeing all packets for my android phone but rather just a few packets, which after research seems to be a multicast packets. See screenshot below:

alt text

So where are all the tcp/http connection? I tried to enable monitor mode but got an error that it is not supported by the device and wireshark failed to capture any packets.

Am I missing something or this is how it is supposed to work?

asked 27 Nov '15, 07:52

Arsene's gravatar image

Arsene
6113
accept rate: 0%

edited 27 Nov '15, 07:53


See the answer to this question first, and then eventually come back with additional question. Without monitor mode working, you cannot capture traffic in which your capturing machine is not involved.

If you are able to make your capturing machine a WiFi access point and connect the Android phone to internet through that access point, or if you can run tcpdump on the existing access point, it would be a different situation and you could see the phone's traffic.

permanent link

answered 27 Nov '15, 08:00

sindy's gravatar image

sindy
6.0k4851
accept rate: 24%

edited 27 Nov '15, 08:07

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×37
×36
×21

question asked: 27 Nov '15, 07:52

question was seen: 2,741 times

last updated: 27 Nov '15, 08:07

p​o​w​e​r​e​d by O​S​Q​A