Search code examples
linuxnetwork-programmingwiresharkpacket

Wireshark does not show packets other than the packets related to my system


I use a Ubuntu Linux Machine and promiscuous mode is on in my WiFi NIC.

These are the IP in my network

192.168.18.1 - My Router 192.168.18.2 - My Machine with Wireshark 192.168.18.3 - My Windows Machine (Victim)

I want to capture the packets that are transmitted through My windows machine and the WiFi router.

This is the output of ifconfig

>  wlp2s0: flags=4163<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
>  inet 192.168.18.2  netmask 255.255.255.0  broadcast 192.168.18.255

The output of my lshw -C network

*-network
       description: Wireless interface
       product: RTL8822BE 802.11a/b/g/n/ac WiFi adapter
       vendor: Realtek Semiconductor Co., Ltd.
       physical id: 0
       bus info: pci@0000:02:00.0
       logical name: wlp2s0
       version: 00
       serial: d0:c5:d3:f4:37:71
       width: 64 bits
       clock: 33MHz
       capabilities: bus_master cap_list ethernet physical wireless
       configuration: broadcast=yes driver=rtw_pci driverversion=5.4.0-40-generic firmware=N/A ip=192.168.18.2 latency=0 link=yes multicast=yes promiscuous=yes>
       resources: irq:61 ioport:e000(size=256) memory:f7800000-f780ffff

You can see that I use an RTL8822BE adapter so do share your answer if it supports promiscuous mode

I have also given proper decryption keys still no luck !


Solution

  • I don't think what you ask for is possible. If the WiFi connection is protected then at most what you'll see are random (encrypted) bytes in the air. And even for that you will probably need to set your driver to Monitor Mode.