This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Track other ip’s or mac addresses

0

Hello,

I watch the packets tracking, but they only refer to my main network device . I would like to track other devices (smartphones, laptops) that are connected to my wifi network but i see only my ip tracked. Is there a way to manage it? Is there also a way to log their internet history browsing?

Thanks in advance Theo Koletsis

asked 21 Apr '17, 15:09

tkoletsis's gravatar image

tkoletsis
6112
accept rate: 0%


One Answer:

0

You haven't provided much information about your capture environment - OS, Wireshark version, capture hardware, etc. - but if you haven't done so already, I'd suggest reading the information provided at the Wireshark WLAN (IEEE 802.11) capture setup wiki page.

answered 21 Apr '17, 20:22

cmaynard's gravatar image

cmaynard ♦♦
9.4k1038142
accept rate: 20%

Yes of course

Windows 7, wireshark version 2.2.6 The devices on my wifi network are : laptops , tablets, androids

When wireshark opens and checks for interfaces , finds 3 wireless networks , 1 of them only has traffic, and the address below it is only the ip of my main laptop.

All the other devices are not appearing, and i am not able to capture their traffic

Thanks again

(22 Apr '17, 01:39) tkoletsis

i have unchecked "Enabled promiscuous mode on all interfaces" in the capture options, some of the devices appear now , but not all .

I am not sure what's happening

(22 Apr '17, 02:20) tkoletsis

So did you read the Windows section of the WLAN capture setup wiki page? Your network adaptor needs to be placed in monitor mode; promiscuous mode isn't the answer for capturing the WLAN traffic you seek. The wiki page mentions npcap as a potential solution, or you can try purchasing an AirPcap adaptor. You don't mention if you tried either of these solutions.

If you don't care which capture tool you use, you could also try using Microsoft Message Analyzer or its predecessor Microsoft Network Monitor instead of Wireshark; I believe either of them are capable of capturing the traffic you're seeking, but you will have to try one (or both) to find out for sure.

(22 Apr '17, 15:10) cmaynard ♦♦