First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

Only receiving 802.11 Packets.

Hello, First, Thank you to whomever for your assistance with this issue. My issue is with getting only 802.11 & LLC packets. I have been checking other people's queries, and nobody can really solve it. I'm using Kali Linux, with a up to date Alfa adapter. I have deleted and reinstalled Wireshark, checked all possible options, (edit-->preferences-->protocols-->IEEE 802.11-->Enable decryption---->added my WPA PWD, and WPA PSK. I have also always checked, capture-->options-->enable promiscuous mode on all devices. & finally I am using the Afla adapter 802.11ac AWUS036ACH (b,g,n,AC), & I always use airmon-ng to put the Afla into Monitor Mode.

So, up to now I have used, TCP Dump, T Shark, and Wireshark, with no luck.

P.S. I have never gotten any packets other than, 802.11.

va3ham's avatar
1
va3ham
asked 2023-12-18 16:59:56 +0000
edit flag offensive 0 remove flag close merge delete

Comments

add a comment see more comments

1 Answer

0

Assuming this is an issue with decryption, but you could have other issues since you are using an RTL chipset in monitor mode as these are known to be problematic.

Did you see the Gotchas section in the documentation?

Some wireless security mechanisms are decryptable with Wireshark directly, but not all. Assuming you are using one that is straightforward (for example, WPA2-Personal), you will need the 4-way eapol handshake as well as the other items you describe.

Suggestion: start with the wiki page that has a test trace for decryption; this is known to work. Can you decrypt that one?

Bob Jones's avatar
1.5k
Bob Jones
answered 2023-12-18 19:56:57 +0000
edit flag offensive 0 remove flag delete link
more

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer