Wireshark-users: Re: [Wireshark-users] Wireless Sniffer

From: Steve Evans <sc_evans@xxxxxxxxx>
Date: Sun, 22 Mar 2009 11:23:54 -0700 (PDT)
I assume you mean you cannot see the L3 info. You would either have to turn off encryption in your AP and laptop or enter the encryption key in wireshark.



--- On Sun, 3/22/09, Dani Camps <danicamps81@xxxxxxxxx> wrote:

> From: Dani Camps <danicamps81@xxxxxxxxx>
> Subject: [Wireshark-users] Wireless Sniffer
> To: wireshark-users@xxxxxxxxxxxxx
> Date: Sunday, March 22, 2009, 12:20 PM
> 
> Dear all,
> 
> I have an IBM T43 laptop with Linux on it and an Intel
> 2915a/b/g WiFi chipset. I can put the wireless interface in
> monitor mode and then I see using wireshark all the Layer 2
> (802.11) traffic going on on my wireless network. However,
> when I examine a captured packet wireshark stops at layer 2,
> so I can not see the higher layer info (TCP, UDP ,...). 
> 
> Is there any way to set my wireless card in monitor mode
> but capture the traffic at above L2, so that I would see a
> "normal" wireshark capture with all the info about layer 3
> and above ?
> 
> Best Regards
> 
> Daniel
> 
> 
>       
> ___________________________________________________________________________
> Sent via:    Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>          
>    mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>