This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi,

managed to make wireshark work with my new macbook air 11" with OS X 10.7.1 Lion. I can correctly see the network interface named en0 in the list of capture devices, however, when I start the packet sniffing on my own network to testing it, I only receive informations from my own computer's IP address.

How can i fix this? Is there any way? Sorry for my ignorance, but I'm new to Wireshark and was doing just so experiments.

Regards

asked 23 Jan '12, 04:15

codemark's gravatar image

codemark
1111
accept rate: 0%


As it's a MacBook Air, en0 is the AirPort device (MacBook Airs don't come with an Ethernet interface, you need a USB Ethernet for that). By default, it should see traffic from AND to your machine's IP address.

If you want to capture other traffic on your wireless network, you need to put it in monitor mode. Wireshark should have a checkbox for monitor mode in the dialog box that pops up if you select "Options" from the "Capture" menu and then try to capture on en0.

permanent link

answered 23 Jan '12, 15:09

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×157
×17
×15
×1

question asked: 23 Jan '12, 04:15

question was seen: 9,548 times

last updated: 23 Jan '12, 15:09

p​o​w​e​r​e​d by O​S​Q​A