On 9/28/20 5:08 PM, Fulko Hew wrote:
I'm trying to sniff my Wifi for a project, so I purchased a TP-Link WN722N USB adapter and followed the various instructions I've found on the Web. When I plugged the adapter in I saw a new device 'wlp0s20f0u3' in addition to my internal adapter 'wlps20'.
It looks good, so I start Wireshark (v 2.28) (Fedora 26),
If that's the version you're using, there's no point asking here for help. Why are you using something so old?
and look at Wireshark's 'capture options' table, it shows the interface, but under the heading 'Mon Mode', it shows disabled.
In current Wireshark, that's a checkbox that you can click to turn monitor mode on or off.
I will give you instructions for current Fedora, but I can't help with any issues caused by what you're running.
Run "nmcli dev" to find out what the device is called. In my case I get a line like: wlo1 wifi connected Auto myssid If it doesn't say "unmanaged", then you need to tell NetworkManager that you want to control the device. Otherwise you will have that problem where the interface gets taken away from Wireshark. I will assume that "wlp0s20f0u3" is your device.
nmcli dev set wlp0s20f0u3 managed off
Now, just run Wireshark, check the monitor box for the interface and you're done.