pcap - pcap_dispatch() always returns 0 on Mac OSX for wifi interface -


i have few devices connected wifi router, pcap_dispatch() returns 0 wifi interface while live capturing on mac os x. same code captures response in case of wired interface. please clarify if have missed flag here.

if capturing in monitor mode, getting native 802.11 packets, not ethernet packets, filtering ethernet not work.

furthermore, if you're capturing in monitor mode on protected network, i.e. network using wep or wpa/wpa2, past 802.11 header encrypted, , not able filter on it.

so:

  • if you're on unprotected network, try filter such as

wlan dst 70:73:cb:c1:7c:61 , (arp or (vlan , arp))

  • if you're on protected network, try filter such wlan dst 70:73:cb:c1:7c:61, , make sure program reads packets either blindly writes them out capture file or capable of decrypting wep or wpa/wpa2 packets (the program know of can decrypt them wireshark, although others might able well).

Comments

Popular posts from this blog

javascript - Google App Script ContentService downloadAsFile not working -

javascript - Function overwritting -

php - Find a regex to take part of Email -