On 9/28/20 5:08 PM, Fulko Hew wrote:
> I'm trying to sniff my Wifi for a project, so I purchased a TP-Link
> WN722N USB adapter
> and followed the various instructions I've found on the Web.
> When I plugged the adapter in I saw a new device 'wlp0s20f0u3' in addition
> to my internal adapter 'wlps20'.
> It looks good, so I start Wireshark (v 2.28) (Fedora 26),
If that's the version you're using, there's no point asking here for
help. Why are you using something so old?
Because that's what I currently have installed, and (rightly or wrongly)
I'm afraid to do a 'dnf upgrade'. I've only ever done full installs
and reloads... so I'm afraid of the unknown.
I do have another box running F32, that I could test on.
It would be a different configuration, but I could try it.
> and look at Wireshark's 'capture options' table, it shows the interface,
> but under the heading 'Mon Mode', it shows disabled.
In current Wireshark, that's a checkbox that you can click to turn
monitor mode on or off.
I will give you instructions for current Fedora, but I can't help with
any issues caused by what you're running.
Run "nmcli dev" to find out what the device is called. In my case I get
a line like:
wlo1 wifi connected Auto myssid
If it doesn't say "unmanaged", then you need to tell NetworkManager that
you want to control the device. Otherwise you will have that problem
where the interface gets taken away from Wireshark. I will assume that
"wlp0s20f0u3" is your device.
nmcli dev set wlp0s20f0u3 managed off
yes, as per my previous message, I did turn 'manage' off.
Now, just run Wireshark, check the monitor box for the interface and
you're done.
OK, I'll try testing with the other box tomorrow.