Run wireshark

Topics in this section,

• Learnings in this section

• Version Info

• Run wireshark

  • STEP 1: Install wireshark

  • STEP 2: Set wlan2 to monitor mode

  • STEP 3: Check wireless interface status

  • STEP 4: Check iw dev output

  • STEP 5: Run wireshark

  • STEP 6: Select wlan2 inteface

Learnings in this section

• In this section, you are going to learn

• How to run wireshark

Version Info

#	Version
Wireshark	3.6.2
Ubuntu	Ubuntu 22.04 64 bit
Linux Kernel	6.5.0

How to run wireshark

STEP 1: Install wireshark

• Make sure internet is available in laptop to download wireshark package

test:~$ sudo apt-get update

test:~$ sudo apt-get install wireshark

STEP 2: Set wlan2 to monitor mode

• Set wlan2 interface to monitor mode

test:~$ sudo iw dev wlan2 set type monitor

• Bring up wlan2 interface

test:~$ sudo ifconfig wlan2 up

• Set the wlan2 interface to channel 6,because in hostapd configuration file the channel is set to 6.

test:~$ sudo iw dev wlan2 set channel 6

STEP 3: Check wireless interface status

test:~$ sudo iwconfig wlan2
wlan2     IEEE 802.11  Mode:Monitor  Frequency:2.437 GHz  Tx-Power=20 dBm
          Retry short limit:7   RTS thr:off   Fragment thr:off
          Power Management:off

STEP 4: Check iw dev output

test:~$ sudo iw dev
phy#2
        Interface wlan2
                ifindex 17
                wdev 0x600000001
                addr 02:00:00:00:02:00
                type monitor
                channel 6 (2437 MHz), width: 20 MHz (no HT), center1: 2437 MHz
                txpower 20.00 dBm
                multicast TXQ:
                qsz-byt qsz-pkt flows   drops   marks   overlmt hashcol tx-bytes        tx-packets
                0       0       0       0       0       0       0       0               0
phy#1
        Interface wlan1
                ifindex 16
                wdev 0x500000001
                addr 02:00:00:00:01:00
                type managed
                txpower 20.00 dBm
                multicast TXQ:
                qsz-byt qsz-pkt flows   drops   marks   overlmt hashcol tx-bytes        tx-packets
                0       0       0       0       0       0       0       0               0
phy#0

        Interface wlan0
                ifindex 15
                wdev 0x400000001
                addr 02:00:00:00:00:00
                type managed
                txpower 20.00 dBm
                multicast TXQ:
                qsz-byt qsz-pkt flows   drops   marks   overlmt hashcol tx-bytes        tx-packets
                0       0       0       0       0       0       0       0               0

STEP 5: Run wireshark

test:~$ sudo wireshark

STEP 6: Select wlan2 interface

• Double click on wlan2 inteface to capture the packets