This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Wireshark is sniffing only my pc’s data

0

Hi,

managed to make wireshark work with my new macbook air 11" with OS X 10.7.1 Lion. I can correctly see the network interface named en0 in the list of capture devices, however, when I start the packet sniffing on my own network to testing it, I only receive informations from my own computer's IP address.

How can i fix this? Is there any way? Sorry for my ignorance, but I'm new to Wireshark and was doing just so experiments.

Regards

asked 23 Jan '12, 04:15

codemark's gravatar image

codemark
1111
accept rate: 0%


One Answer:

2

As it's a MacBook Air, en0 is the AirPort device (MacBook Airs don't come with an Ethernet interface, you need a USB Ethernet for that). By default, it should see traffic from AND to your machine's IP address.

If you want to capture other traffic on your wireless network, you need to put it in monitor mode. Wireshark should have a checkbox for monitor mode in the dialog box that pops up if you select "Options" from the "Capture" menu and then try to capture on en0.

answered 23 Jan '12, 15:09

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%