Trouble Receiving Wireless Traffic from Other Devices on Network

Hello, I am having problems capturing traffic sent between devices other than my own on my network. I am running Wireshark 2.6.2 64-bit on Windows 10. Originally, I was using the WinPCap library, but after reading this article, I removed WinPCap and installed Npcap so monitor mode would work. I'm not 100% certain if monitor mode is necessary to accomplish this, but other articles pointed in this direction. Ideally, I'd like to be able to capture wireless traffic sent between other devices on my network, specifically HTTP packets. Thanks for any help.

Edit: I have recently been able to capture a small amount of traffic from my phone when capturing on my laptop. But the only traffic I am capturing is in the form of mDNS packets.

ezlikespie's avatar
1
ezlikespie
asked 2018-12-20 19:34:17 +0000, updated 2018-12-21 15:26:50 +0000
edit flag offensive 0 remove flag close merge delete

Comments

Guy Harris's avatar Guy Harris (2018-12-20 23:11:11 +0000) edit

Yes, from what I understood I needed to enable monitor mode in order to capture packets from other devices. I read that WinPCap did not support monitor mode, so i installed Npcap. Whether enabling monitor mode was necessary or if I was even able to enable it by installing Npcap is a mystery to me.

ezlikespie's avatar ezlikespie (2018-12-21 00:15:26 +0000) edit

If your network is "protected" - i.e., if traffic is encrypted using WEP or WPA/WPA2, so that it can't be sniffed without knowing the network password - you also should read the page about decrypting protected 802.11 traffic.

Whether enabling monitor mode was necessary

If you want to capture traffic between devices other than my own on my network, it is necessary.

Edit: I have recently been able to capture a small amount of traffic from my phone when capturing on my laptop. But the only traffic I am capturing is in the form of mDNS packets.

Does Wireshark show those packets with Ethernet headers or 802.11 headers?

Guy Harris's avatar Guy Harris (2018-12-21 20:06:11 +0000) edit
add a comment see more comments