Wireshark-users: Re: [Wireshark-users] Capturing Wi-Fi traffic to/from Modem
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: GaryT <gary@xxxxxxxx>
Date: Mon, 14 Jul 2014 17:00:09 +1000

Thank you Guy.
I will do all this as soon as possible and report back. And, I promise not to apply my sense of humour in a serious discussion, ever again. 

Will revert ASAP, perhaps 48 hours.   Life gets in the way  :-)
Again, many thanks.
GaryT


On 14/07/14 04:08, Guy Harris wrote:


On Jul 12, 2014, at 9:47 PM, GaryT <gary@xxxxxxxx> wrote:

On 13/07/14 01:53, Evan Huus wrote:

Do you have sufficient permissions to view those interfaces? If you just


[BIG SNIP]


(although the "Intel 4965 a/b/g/n", in the "Chipset" column, and the "iwl4965", in the "Driver" column, might be different).
The "monitor mode enabled on mon0" means that you must then capture on the "mon0" interface, not on the "wlan0" interface, to capture in monitor mode.
When you're finished capturing, you'd want to turn monitor mode off.  To turn monitor mode off, you would use a command such as
	sudo airmon-ng stop mon0
If, instead, "sudo airmon-ng start wlan0" prints something that doesn't mention a "mon0" device, you should capture on the "wlan0" command and, when done, do
	sudo airmon-ng stop wlan0


	--<0>--