Under Mac Seria, latest version 2.4.2 (v2.4.2-0-gb6c63ae) install ... I am only seeing 802.11 packets from my Wi-Fi:en0 interface.
Am I doing something wrong ? I thought I'd see TCP and other type of protocol packets ...
asked 16 Oct '17, 17:35
It must be set to monitor mode, so you are getting the raw 802.11 frames that are likely encrypted.
Under options, there is a check box for monitor mode for each adapter. Uncheck and see what you get. If you are around wifi networks that are unencrytped you will likely see udp and tcp traffic even in this state; otherwise you will need to decrypt. See the wireshark page on decryption to try that.
answered 16 Oct '17, 23:02