I can't capture wifi packets on macbook using wireshark

Hi guys, I'm using a macbook Big Sur version macos 11.6.1, and I can't capture any packet using my Wi-Fi en0 adapter. I don't need monitor mode to see radio packet headers, I'm interested only on data regular packets. There is no error when I start the capture on wireshark, however it says "No packets captured". The strange part is the I can capture packets with "tcpdump -i en0"... I can even do a "tcpdump -i en0 -w test.pcap" and later open the file with wireshark. Does anyone could help me with?

I don't need monitor mode to see radio packet headers, I'm interested only on data regular packets.

Make sure you turn monitor mode off (the Wi-Fi adapters on newer Macs require that you disassociate from a wireless network network in order to capture in monitor mode, otherwise it doesn't give you any packets). Select Capture > Options, look for en0 in the list, and make sure the checkbox in the Monitor column is not checked.

19.9k

Guy Harris

answered 2021-11-12 07:09:46 +0000

edit flag offensive 0 remove flag delete link

Comments

Thanks Guy! Disabling the checkbox on the "monitor" column solved the issue!

eharo (2021-11-12 17:54:59 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

I can't capture wifi packets on macbook using wireshark edit

Comments

1 Answer

Comments