Hey there, i got a wired problem. I think i figured out how to use Wireshark, i can capture my own packets. But now I want to capture packets of my Ipod which is on the WLAN too. I have a Macbook Pro mid 2010 and Im running in Monitor Mode to get all the traffic, it also seems to capture packets. The number at the bottom which says "Packets" increases with the time but "Displayed" is always 0. On my macbook it works, but trying to do it on the wlan doesnt. Did I do anything wrong? Thanks for your help. asked 13 Aug '11, 09:13  MrBonsai |
One Answer:
I am not an expert, but i think i can give you a tip. To see packets sent by devices different that the one where wireshark is installed, you need to perfform a MITM(Man In The Middle) attack. This means that your MacBook(The Man in The Middle in this case) attack the network(Ussing Arp Poissoning technique), and place it self between the iPhone and the Access point used to go to the internet.
Once you become the man in the middle, turn on wireshark capture at your NIC to see the traffic. I recommend you to google around for MITM and ARP Poisoning. Also you will need some other gadgets besides wireshark, have a look at Ettercap I don't know if this technique will work, when an iPhone device is involved, i never tried. But i see no reason why not. answered 18 Aug '11, 06:53  sfrj edited 18 Aug '11, 06:53 |
Do you have a display filter? If so, what is the filter?