I've installed Wireshark and configured it to let my user run it with all needed privileges (I enabled dumpcap
and added my user to wireshark
group, then restarted).
Devices are shown and capture starts well. The problem is that only packets sent to and directed to the PC where Wireshark is running are captured. Obviously I enabled Promiscuous mode in the capture options dialog.
For example, if I run Wireshark and then surf the web on Firefox, packets are captured. If I start browsing with my smartphone, instead, no packet is captured (PC and smartphone are connected to the same domestic WiFi network).
I'm working with a WiFi device wlan0
with ath9k
drivers. Here you are the output of ifconfig wlan0
and lspci | grep Wireless
:
lorenzo@XUBUNTU:~$ ifconfig wlan0
wlan0 Link encap:Ethernet HWaddr 5c:ac:4c:32:dc:1d
indirizzo inet:192.168.1.100 Bcast:192.168.1.255 Maschera:255.255.255.0
indirizzo inet6: fe80::5eac:4cff:fe32:dc1d/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1585 errors:0 dropped:0 overruns:0 frame:0
TX packets:1782 errors:0 dropped:0 overruns:0 carrier:0
collisioni:0 txqueuelen:1000
Byte RX:970355 (970.3 KB) Byte TX:401610 (401.6 KB)
lorenzo@XUBUNTU:~$ lspci | grep Wireless
03:00.0 Network controller: Atheros Communications Inc. AR9287 Wireless Network Adapter (PCI-Express) (rev 01)
What I want to achieve is to examine the network traffic of my smartphone using my PC running Wireshark, both connected to the same personal domestic WiFi access point.
Please help me!!
PS: I posted this question on AskUbuntu too, but it not helped me. I re-posted here just because I see there are more Wireshark related answers here than there... Sorry for that.