pcap - pcap_dispatch() always returns 0 on Mac OSX for wifi interface -
i have few devices connected wifi router, pcap_dispatch() returns 0 wifi interface while live capturing on mac os x. same code captures response in case of wired interface. please clarify if have missed flag here.
if capturing in monitor mode, getting native 802.11 packets, not ethernet packets, filtering ethernet not work.
furthermore, if you're capturing in monitor mode on protected network, i.e. network using wep or wpa/wpa2, past 802.11 header encrypted, , not able filter on it.
so:
- if you're on unprotected network, try filter such as
wlan dst 70:73:cb:c1:7c:61 , (arp or (vlan , arp))
- if you're on protected network, try filter such
wlan dst 70:73:cb:c1:7c:61, , make sure program reads packets either blindly writes them out capture file or capable of decrypting wep or wpa/wpa2 packets (the program know of can decrypt them wireshark, although others might able well).
Comments
Post a Comment