Results 1 to 1 of 1

Thread: Howto capture on a mac:

  1. Wink Howto capture on a mac:

    These instructions will be updated as we get feedback. I hope to get a video tutorial up too. For now here are a few simple instructions to get captures natively from your MAC OS X (lion) wireless card.

    **UPDATE** Eye PA is currently unable to open captures made on a broadcom card.

    Select En1 and select the capture options:
    Attachment 619
    You'll want to enable "monitor mode" and make sure "802.11 plus radiotap header" is selected in the drop down. It may help to add the following filter: !(malformed) && (wlan.fcs_good). That will filter out malformed packets and packets that fail the frame check.

    The following images may help configuring WLAN specific capturing. To get into the preferences select: Edit > Preferences. There will be a column on the left called "protocols" underneath you will select the radiotap preferences and also IEEE 802.11. These will help you ignore bad packets which may cause Eye P.A. to crash.

    Ideally Eye P.A. will be able to handle malformed packets - it just isn't quite there yet.

    Feedback? Am I missing anything?
    Attached Thumbnails Attached Thumbnails Click image for larger version. 

Name:	Wireshark Preferences - Protocols.png 
Views:	200 
Size:	28.7 KB 
ID:	673   Click image for larger version. 

Name:	Wireshark preferences - ieee80211.png 
Views:	200 
Size:	85.1 KB 
ID:	674   Click image for larger version. 

Name:	Wireshark preferences - radio tap fcs.png 
Views:	188 
Size:	52.4 KB 
ID:	675   Click image for larger version. 

Name:	capture options - en1 - monitor mode plus radio tap header.png 
Views:	196 
Size:	40.2 KB 
ID:	676   Click image for larger version. 

Name:	drop malformed and bad fcs packets.png 
Views:	186 
Size:	39.0 KB 
ID:	677  


Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •