This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Only capturing broadcast and probe responses.

0

I am in a hotel with open wifi (no MAC address filtering or encryption). I am running kali on VMware with an Alfa card 36NH. In Wireshark, I am only seeing broadcast and probe responses. I looked in Wifite and it says that all of the hotel APs are encrypted (WPA2). I am at a loss with what to do from this point. My antenna is in monitor mode and is on wlan0 (wlan0mon).

asked 05 Mar '17, 06:05

joe08's gravatar image

joe08
6112
accept rate: 0%


One Answer:

0

I am at a loss with what to do from this point

What do you want to do? I wouldn't be trying to crack networks in some hotel as there could be legal ramifications to these types of activities. To practice, set up your own wireless network and attack that one.

If you expect to see data frames, perhaps your issue is related to one of these:

https://ask.wireshark.org/questions/53260/cannot-capture-frames-other-than-broadcast-or-multicast-over-wlan https://ask.wireshark.org/questions/59652/cant-see-any-tcpudpicmp-traffic?page=1&focusedAnswerId=59656#59656 https://ask.wireshark.org/questions/56658/unable-to-capture-relevant-packets-with-wireshark-airmon-ng-wpa2-psk-aes?page=1&focusedAnswerId=56660#56660

I think that is an RALink chipset, so in particular check the first link above.

answered 05 Mar '17, 12:49

Bob%20Jones's gravatar image

Bob Jones
1.0k2515
accept rate: 21%