Opened 12 years ago

Closed 11 years ago

#36390 closed enhancement (invalid)

monitor mode for wireshark

Reported by: vaniat@… Owned by: opendarwin.org@…
Priority: Normal Milestone:
Component: ports Version:
Keywords: Cc: cooljeanius (Eric Gallager)
Port: wireshark

Description

Hello,

I have unfortunately upgraded to wireshark 1.8.2 to find out that monitor mode was removed from capturing options for the interface? I am trying to revert back to old 1.6 wireshark but that doesn't work any more :(. Is there any other way I can enable apple wireless card to capture RAW air packets?

Thanks a lot for your help.

Kindest regards,

Vania Toperich

Change History (5)

comment:1 Changed 12 years ago by mf2k (Frank Schima)

Keywords: monitor mode capture removed
Owner: changed from macports-tickets@… to opendarwin.org@…
Type: defectenhancement
Version: 2.1.2

In the future, please Cc the port maintainer(s).

comment:2 in reply to:  description Changed 12 years ago by ryandesign (Ryan Carsten Schmidt)

Replying to vaniat@…:

I am trying to revert back to old 1.6 wireshark but that doesn't work any more :(.

In case you had not seen them already, you should check the instructions for installing an older version of a port.

comment:3 Changed 11 years ago by cooljeanius (Eric Gallager)

Cc: egall@… added

Cc Me!

comment:4 Changed 11 years ago by jul_bsd@…

I don't think the problem is linked to wireshark version. It just depends on the system and hardware/chipset you have. see

http://www.wireshark.org/faq.html#q10.1 http://wiki.wireshark.org/CaptureSetup/WLAN#Mac_OS_X https://supportforums.cisco.com/document/75221/wireless-sniffing-using-mac-os-x-106-and-above (/System/Library/CoreServices/Applications/Wireless Diagnostics.app)

So normally, it should work. but can depend on your wireless chipset

On 1.10.5, I confirm I haven't a capture options checkbox for monitor mode (only use promiscuous mode) but as said on the previous links, it just moved "check the "Monitor mode" checkbox in the "Capture Options" dialog (in Wirehark before 1.8) or in the "Edit Interface Settings" dialog for the interface in Wireshark 1.8 and later. " https://www.wireshark.org/docs/wsug_html_chunked/ChCapEditInterfaceSettingsSection.html

=> bug invalid

comment:5 Changed 11 years ago by neverpanic (Clemens Lang)

Resolution: invalid
Status: newclosed
Note: See TracTickets for help on using tickets.