how to capture packets using monitor mode wireshark linux

In the Packet List window, locate and select any Beacon frame (from any SSID). Leave the capture running and set the channel to your 5GHz channel set earlier. In the Packet List window, confirm that packets are being captured on the channel you specified. You can enable/disable automatic scrolling as you desire with this button. Note: In Wireshark, if the Packet List is not scrolling, you can enable scrolling by clicking on the Automatically Scroll button in the button bar (butto with multiple vertical lines and an arrow pointing down in the bottom right-hand corner of a the button). Sudo iw dev wlan0 set channel 6 (or whatever channel is correct for you) With Wireshark still running, return to a terminal and manually set the channel to the channel your 2.4 GHz AP is currently on. Note: You can add any packet variable as a column doing this.

You should now see Channel as one of the columns in the Packet List window. In the Packet Details, expand 802.11 radio information then right-click on Channel and choose Apply as Column. In the Packet List window, select any captured frame. Once you have confirmed your SSIDs, you can stop airodump-ng. If, after a few seconds, you do not see your 5GHz SSID in the output, stop airodump-ng and restart as follows: Set the passphrase to something you can remember.įrom a terminal on your VM, start airodump-ng to confirm you see both of your new SSIDs being advertised. On the Wireless –> Wireless Security tab, set the security of both interfaces (wl0 & wl1) to be WPA2-Personal, with AES encryption. Note: After settings are applied, you may need to refresh the web interface. You may need to reload web interface after applying settings.įor Wireless Physical Interface wl1 : Wireless Channel: Manually set to 1, 6 or 11.Note: If that produces an error, do this instead:įrom a web browser, connect to web admin adminterface of access point. If you have logged in as root, you can omit the ‘sudo’ portion of each command.įrom a terminal, confirm USB adapter is connected to Linux VM.

These steps assume you have logged in as a non-root user.

These steps walk you through setting up a monitor mode interface on your Debian Linux system and briefly illustrates how to capture packets and filter what is displayed using Wireshark.

How to capture packets using monitor mode wireshark linux