This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Max data rates shown in wireshark wrong?

0

I am sniffing packets(wireless) using AirPcap Nx and notice that the max data rates that Wireshark is showing is only 58.5. I know they are sending and receiving at higher rates than what is shown because we have another system that has a paid sniffer program on it that shows higher rates. Also, our devices say what they are transmitting at. Is this a limitation in Wireshark, or a setting I need to adjust?

asked 13 Jan '12, 07:30

Joseph%20Conley's gravatar image

Joseph Conley
1●3●3●5
accept rate: 0%

One Answer:

2

Are you using Radiotap encapsulation? If so you might want to try PPI instead. The AirPcap driver conforms to an older version of the Radiotap specification, one which doesn't allow higher data rates to be reported correctly.

answered 13 Jan '12, 08:32

Gerald%20Combs's gravatar image

Gerald Combs ♦♦
3.3k●9●22●58
accept rate: 24%

PPI is enabled in wireshark? Or an I off target.

(13 Jan '12, 09:52) Joseph Conley

You should be able to set the encapsulation in Wireshark via "Capture→Options→Wireless Settings→Capture Type" or in the AirPcap control panel via "Settings→Capture Type".

(13 Jan '12, 10:02) Gerald Combs ♦♦

That was it, thanks

(13 Jan '12, 10:24) Joseph Conley