why can't I capture home traffic?
#1
I tried capturing home traffic at my house to test out wireshark packet sniffer.

I'm trying to sniff my family's passwords.

See, but I really really really just can't get HTTP recorded.

So, I have a question as a wireshark n00b.

I managed to get all the interfaces to show up as they wouldn't before and solved my permissions issue.

My NIC is in monitor mode.

How do I get http packets to appear that are from other computers besides my own?

Packets only appear from my own computer, not elsewhere on wifi network.

Thanks.

Best,

QMark
Reply
#2
(06-24-2018, 03:31 AM)QMark Wrote: I tried capturing home traffic at my house to test out wireshark packet sniffer.

I'm trying to sniff my family's passwords.

See, but I really really really just can't get HTTP recorded.

So, I have a question as a wireshark n00b.

I managed to get all the interfaces to show up as they wouldn't before and solved my permissions issue.

My NIC is in monitor mode.

How do I get http packets to appear that are from other computers besides my own?

Packets only appear from my own computer, not elsewhere on wifi network.

Thanks.

Best,

QMark

Hi QMark, I think you need the mode to be promiscuous instead of monitor.
Reply
#3
Depending on your OS, you'll need promiscuous mode. Also, you'll need to setup wireshark directly in front of your router to catch everything coming to it. You could also just use built in tools instead of wireshark
Reply
#4
(06-24-2018, 02:59 PM)ekultek Wrote: Depending on your OS, you'll need promiscuous mode. Also, you'll need to setup wireshark directly in front of your router to catch everything coming to it. You could also just use built in tools instead of wireshark

So wireshark’s feature to make it into promiscuous mode isn’t working eh?

(06-24-2018, 02:25 PM)nats Wrote:
(06-24-2018, 03:31 AM)QMark Wrote: I tried capturing home traffic at my house to test out wireshark packet sniffer.

I'm trying to sniff my family's passwords.

See, but I really really really just can't get HTTP recorded.

So, I have a question as a wireshark n00b.

I managed to get all the interfaces to show up as they wouldn't before and solved my permissions issue.

My NIC is in monitor mode.

How do I get http packets to appear that are from other computers besides my own?

Packets only appear from my own computer, not elsewhere on wifi network.

Thanks.

Best,

QMark

Hi QMark, I think you need the mode to be promiscuous instead of monitor.

Wire shark automatically sets it into that. If not, how do I set it back in Ubuntu so promiscuous mode works?
Reply
#5
I figured it out, lol.

I had to basically upgrade Ubuntu, then run wireshark as root lol.

Works though.

Loads of SSL I must say.
Reply
#6
(06-26-2018, 05:41 PM)QMark Wrote: I figured it out, lol.

I had to basically upgrade Ubuntu, then run wireshark as root lol.

Works though.

Loads of SSL I must say.

Wire shark provides a certificate to decrypt ssl, or it should anyways
Reply
#7
(06-28-2018, 10:49 PM)ekultek Wrote:
(06-26-2018, 05:41 PM)QMark Wrote: I figured it out, lol.

I had to basically upgrade Ubuntu, then run wireshark as root lol.

Works though.

Loads of SSL I must say.

Wire shark provides a certificate to decrypt ssl, or it should anyways

Thanks. Which one? Can I download it?
Reply


Possibly Related Threads…
Thread Author Replies Views Last Post
  why won't it let me copy tftp into flash from CISCO router to server? QMark 1 1,876 06-01-2020, 07:54 PM
Last Post: Insider
  how to decrypt entire packet capture file? QMark 1 5,104 06-28-2018, 10:47 PM
Last Post: ekultek
  What other ways are there to capture passwords on an open network besides sniffers? QMark 5 7,144 06-28-2018, 08:22 PM
Last Post: enmafia2