First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Monitor Beacon Frames on both 2.4G and 5G WiFi

I want to collect management frames from my mesh WiFi system to investigate some timing issues using Wireshark on Windows 10. (One router and two satellites: a total of six MAC addresses). Have a pair of Panda PAU09 dual band WiFi adapters that support monitor mode. Have a capture filter of: ether src (MAC1 or MAC2 or ... MAC6) on each adapter Checked Promiscuous Mode and Monitor Mode. When I start a capture, there are no packets.

I think that I need to: * set each of the adapters to the specific 2.4G and 5G channels used by my WiFi system (8 and 48 right now) Perhaps Wlanhelper can set the 2.4G adapter to channel 8, but how to I set the 5G adapter to channel 48?

I tried using Wlanhelper to set adapters to monitor mode and got error 5.

Is Wireshark on Windows 10 capable of doing this, or do I need to move to a Linux machine?

CrimpOn's avatar
1
CrimpOn
asked 2021-11-11 23:54:00 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Wlanhelper is part of Npcap, which is supplied along with Wireshark but isn't part of Wireshark and isn't maintained by the Wireshark developers. You should probably file an issue about this on the Npcap issues list.

Guy Harris's avatar
19.9k
Guy Harris
answered 2021-11-12 07:14:54 +0000
edit flag offensive 0 remove flag delete link
more

Comments

Thank you for the speedy response. I have made progress by running Wlanhelper as Administrator and am able to set one adapter to monitor mode, channel 8 and the other to monitor mode channel 48 (but it reports 36). When I do a capture, the 2.4G channel displays Beacon frames from the three access points, but the 5G adapter does not display anything.

I will ask for help on the Npcap issues list. Was hoping that using Wireshark with more than one WiFi adapter is a relatively common practice and there might be some step that I am overlooking.

CrimpOn's avatar CrimpOn (2021-11-12 13:41:41 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer