wireshark not seeing all packets on WiFi

Posted by Caffeine Coma on Server Fault See other posts from Server Fault or by Caffeine Coma
Published on 2011-03-19T01:09:02Z Indexed on 2011/03/20 16:11 UTC
Read the original article Hit count: 270

Filed under:
|

I'm using Wireshark on OSX, trying to sniff my home network over WiFi. While I can see packets that are sent to/from the host I'm sniffing on, I'm not seeing anything else that goes over the WiFi. It's like I'm not in promiscuous mode or something (the promiscuous mode box is in fact checked).

The router is an Apple Airport Extreme, protected by WPA2. I'm attached to the network I'm trying to sniff, so I'm confused about why I can't see other traffic.

Edit: I solved this by the following:

  1. Plug Macbook directly into the Airport Extreme router
  2. Enable "internet sharing" on Macbook, with no password.
  3. Bind wireless device (the one I wanted to sniff) to the WiFi hotspot generated by Internet sharing in step 2.
  4. Run Wireshark on the Macbook, bound to device en1.

Don't forget to disable sharing after you're done. :-)

© Server Fault or respective owner

Related posts about wifi

Related posts about wireshark