My goal: I want to analyze the network protocols of a wireless device on my net.
I've successfully set my linux laptop into monitor and promiscuous mode for its wifi interface. I used airmon-ng to create a virtual network wifi interface that is in monitor mode.
And I can successfully use Wireshark to look at the network traffic. But...the WiFi data packets are not disassembled by Wireshark. They're just shown as "data"
Is there any way to watch the network traffic itself at the IP/TCP/http etc protocol levels?
Is the problem that the WiFi is encrypted? Suppose I set my WiFi gateway to be no security. Will Ethershark then be able to show the higher level protocols?