Hello, This question is not actually for wireshark but a more general one in case someone has the same problem. Consider the following scenario. 2 wireless cards, 1 sniffing with wireshark and 1 send deauth packets to a device (consider all set on the same channel). The sniffing device does not sniff any deuthentication packets, neither does the device, but if i start wireshark on the deauthing device I normally see the packets as being sent. I tested it enough to be sure that the deauth packets are not being send. Why is the deauthenticating card seeing the packets normally and what exactly might be the problem? Any answers would be really appreciated! asked 14 Apr '16, 03:06  biteme |
This is a static archive of our old Q&A Site.
Please post any new questions and answers at ask.wireshark.org.
I would guess the difference is that Wireshark shows you what was sent down the stack, but if the driver won't put it on the air, it won't go. It's an assumption, usually a good one, that if you see it in Wireshark it makes onto the network. But not always, with a notable example being a firewall. Did you check the aircrack-ng forum? That suite of software has some standard injection tests that you can try to see if you wireless card will inject the frame into the air.