0
votes
1answer
31 views

How can I tell if Wireshark has sucessfully decrypted a capture

I have used Microsoft Network Monitor 3.4 in Windows 7 to create a capture file from my wireless g network by setting monitor mode. When loaded into Wireshark I can see the four way handshake and I ...
0
votes
0answers
14 views

cannot capture packets on wireshark without internet

I am using Wireshark on my Windows 8.1 Pro 32-bit pa and whenever I start Wireshark without internet, it can't capture ant packets. But when I am connected to the internet, it captures packets form ...
0
votes
0answers
24 views

Drop network packages

I'm seeing a lot more protocols in the wireshark capture in my university network than in my home network and the connection is incredibly bad at the university (> 2 Min. to get an IP address from ...
-2
votes
3answers
70 views

Is there a free program that can detect which device on my network is causing lag? [closed]

I'm on a small business network, and rarely we experience really extreme latency. I have no idea what device might be causing the lag, and wanted to know if there was a piece of software that could ...
0
votes
1answer
116 views

How to capture 802.1X EAPOL packets in windows 7?

I want to capture 802.11 EAPOL packets on windows 7,however,i fail to capture any EAPOL packet use wireshark.What tools can i use to capture the EAPOL packet? my environment is windows 7,wireshark ...
1
vote
2answers
272 views

Wireshark only capturing beacon frames

I am trying to sniff my own network to capture http traffic. On airodump my network security show "WPA - TKIP - PSK", so I went to Wireshark > Edit > Preferences > Protocols > IEEE 802.11 > Enabled ...
0
votes
0answers
105 views

Wireshark Capture Filter

I am new to wireshark and I am trying to capture an ICMP packet over 802.11g, I am using windows and pingplotter. The issue is that on wireshark capture I am not getting any ICMP packets no matter how ...
1
vote
2answers
87 views

Wireshark filtering for one network

How do i make Wireshark filter results so it just shows results from one wifi net work. I have had a look on Google but found nothing. Can any one help.
1
vote
1answer
101 views

Eavesdropping on a WPA2 (PSK) network

I’m trying to capture frames sent and / or received by other clients on my wireless (WPA2-PSK) network. I installed Wireshark, activated the promiscuous mode and set the decryption key, but I’m unable ...
0
votes
1answer
64 views

Capturing more WLAN frames than sending/receiving Ethernet frames

I'm trying to determine whether a computer capturing WLAN frames on an 802.11n network does this correctly. I do this by letting one computer (1) generate traffic by downloading some files, and ...
4
votes
1answer
4k views

How to block the Whatsapp Android application in a network

I need to block the users from accessing Whatsapp Android application who have logged in to my network. I tried to take Wireshark logs and tried to find the server's IP Address and port number, but I ...
2
votes
2answers
332 views

What's the difference between wlan.sa, wlan.ra, wlan.ta and wlan.da?

Tshark/wireshark (CLI) has several fields to display for WLAN, including these four (+ description from manual): wlan.sa: Source address wlan.ra: Receiver address wlan.ta: Transmitter address ...
0
votes
1answer
390 views

Which Wireshark settings to see connections from phone

I am trying to find out which URLs my phone is accessing when on a local WIFI network. My trials so far have been running an Ad-hoc network on my Laptop and sharing Internet through it (this works). ...
0
votes
0answers
14 views

Monitoring traffice from an internet enabled printer [duplicate]

I have a WiFi internet enabled printer that can grab content from the web. I want to use something like Fiddler or Wireshark to view the traffic it's sending and receiving. Is possible? How would I go ...
0
votes
1answer
260 views

Why doesn't Wireshark capture management frames in promiscuous mode?

I am working with Wireshark in promiscuous mode, which is normally used to allow Wireshark to capture all the frames in the connected network. The problem is that Wireshark in this mode doesn't ...
1
vote
1answer
725 views

Unable to capture wifi traffic with wireshark

Even a few days ago everything was fine, but now simply I can't capture and see tcp, http, etc. wifi traffic but only the traffic for the protocols 802.11 and LLC. I used different wifi spots ...
0
votes
2answers
227 views

Why am I getting arp requests from local machine?

I'm connecting wireless network (provided by apartment, so possibly quite a lot of machines connect to it) and I noticed that ARP requests from local machines send to my machine instead broadcast ...
1
vote
1answer
113 views

How can I find the modulation schemes used for the packet transmission using wireshark?

I am using wireshark to find the modulation schemes and the type of packets captured for 802.11ac. How can I find the modulation schemes used for the packet transmission? Preferably using wireshark? ...
3
votes
1answer
973 views

Wireshark doesn't capture 802.11 data packets

Lately I have been trying to analyze wifi traffic over my own test router. I looked on the wireshark website on how to do this and setup my own testing network. my network: dd-wrt router with WPA2 ...
1
vote
1answer
4k views

Wireshark on WPA2-PSK [AES] not decrypting

I am trying to capture all packets on my network from all devices connected to an SSID . I started up airmon-ng Started Monitoring on mon0 Changed Preferences in wireshark to 'enable decrytion' ...
0
votes
2answers
17k views

Is it possible to track browsing history inside a wireless network

I'm using Internet, shared through wireless network. Now, is there any possibility to track me (i.e. my browsing history) from another computer of same network using "Wireshark" or other tracking ...
0
votes
1answer
759 views

Why Wireshark is not showing high layer packets like ICMP/IP/UDP? (Only broadcast packets are shown)

I am using Wireshark for 802.11g sniffing. The AP is not using any encryption. These are my observations: The vast majority packets are beacons and the probe requests. If I filter out beacons using ...
3
votes
0answers
343 views

Capturing Internet Connection Sharing (ICS) traffic using Fiddler

Does anyone have any idea how to capture HTTP traffic that goes through my ICS connection? Full details: I have a PC connected to internet via Ethernet. PC has set up a Wifi Hotspot using Internet ...
0
votes
0answers
270 views

Analyzing home network traffic using wireshark

I am using wireshark to analyize my home netowrk traffic since it has become painfully slow (Slow download speeds) recently (restarting modem and MediaLink router didn't help, also upgraded the ...
1
vote
3answers
2k views

Why does Wireshark show MAC addresses in the source\destination?

Every device on the my LAN should have IP's along with MAC addresses, and for most of the traffic Wireshark gets on me device, the source and destination columns shows IP addresses, but sometimes it ...
1
vote
2answers
590 views

Tracking Wireless Network Usage

How do you determine the overall bandwidth usage for each computer connected to a wireless network? I manage a small wireless network consisting of a couple of cheap Cisco/Linksys wifi routers. ...
1
vote
3answers
572 views

Capture/Peek WiFi data traffic?

My goal: I want to analyze the network protocols of a wireless device on my net. I've successfully set my linux laptop into monitor and promiscuous mode for its wifi interface. I used airmon-ng to ...
0
votes
1answer
113 views

Why does Windows constantly ping wireless network bridge?

I was looking at a Wireshark capture off my Windows XP box, and I noticed a rather curious behavior. Every 1-2 seconds, the machine sends a ping request to my Linksys WET610N wireless network bridge, ...
1
vote
1answer
4k views

How to set intel centrino advanced-n 6205 in “monitor mode” in Windows 7 (32bit) and Wireshark

I've just installed Wireshark on my laptop and can't see it's working in "monitor mode". Logically I'm not connected with my home network, do I have to be able to monitor my ipads traffic? WinPCAP ...
2
votes
1answer
3k views

How can I stop my computer from doing arp poisoning attacks?

I have a small LAN in my home about 4 - 5 computers. The problem is that when there are usually 3 or more pc's online we keep losing the Internet access randomly about every 2 minutes. So we took a ...
12
votes
2answers
14k views

How do I decrypt WPA2 encrypted packets using Wireshark?

I am trying to decrypt my WLAN data with Wireshark. I have already read and tried eveything on this page but without any success (well, I tried the example dump on that page and succeeded, but I fail ...
3
votes
5answers
3k views

Wireshark (Linux) captures only packet from and to my PC when in promiscuous mode

I've installed Wireshark and configured it to let my user run it with all needed privileges (I enabled dumpcap and added my user to wireshark group, then restarted). Devices are shown and capture ...
1
vote
1answer
710 views

Filtering sniffed logs using Wireshark

I'm experimenting with packet sniffing and log examination using Wireshark, and I'm quickly realizing that I'm not nearly as safe as I should be when using public hot spots. In efforts to better ...
0
votes
1answer
1k views

How to monitor traffic passing through my Wi-Fi access point

I know how to monitor the network interfaces on my local computer with Wireshark. But, how do I monitor the traffic flowing through my wireless access point from connected computers? It seems like ...
0
votes
2answers
3k views

How can I capture other computers traffic in Wireshark on a WiFi-network?

I run Wireshark on a MacBook Air and I also have a Android phone on the same WiFi-network. If I visit a website with the Android phone I can't see that DNS-traffic (or other traffic) in Wireshark on ...
1
vote
0answers
329 views

Need to know who is hogging my bandwidth? [duplicate]

Possible Duplicate: On Mac OS X how can I monitor what is using my internet connection? I have an ethernet connection to my iMac and with Internet sharing I am broadcasting the wireless ...
0
votes
2answers
2k views

Filtering non-local IP traffic with Wireshark

If I capture traffic through my wireless card, I get a ton of different kinds of packets showing up. I'd only like to see traffic that is destined for the internet, i.e., no network stuff that is ...
2
votes
1answer
364 views

Forwarding wifi traffic to wired pc

I'm trying to play around with Wireshark on my home network, and was wondering if there is a way to create a new connection on my PC that receives all wifi packets on the network. The PC is a wired ...
2
votes
3answers
11k views

promiscuous mode with Intel Centrino Advanced-N 6200 AGN wireless card

I'm trying to solve this problem for a long time, googling, reading and trying with no help. I have laptop with Intel Centrino Advanced-N 6200 AGN wireless card which suppose to support promiscuous ...
2
votes
1answer
662 views

Excessive “name query” and “standard query” activity on Wireshark?

I started using Wireshark on some class at university and decided to look at my home wireless network with it, just out of curiosity. But now I'm noticing excessive activity to what it looks like a ...
5
votes
1answer
18k views

Capturing wireless traffic (using Wireshark)

When I run wireshark on a wired network it works fine and reports all of the packets. When I run it on a wireless network though I only see my own traffic. The wireless card I have is supposed to ...
3
votes
3answers
4k views

Interpret Wireshark Captures

I am troubleshooting wireless connectivity problem in my home network. My Thinkpad X200 laptop which use Intel Wifi Link 5100 AGN is not able to surf the internet stably. Sometimes it works, but most ...