capture wireless traffic in monitor mode on Windows workstations at a. Whether that is possible, and, if it is possible, the way that it's done is dependent on the OS you're using, and may be dependent on the adapter you're using see the section below for your operating system. Fortunately, Wireshark has sophisticated wireless protocol analysis support to. If that checkbox is not displayed, or if the -I command-line option isn't supported, you will have to put the interface into monitor mode yourself, if that's possible.
![wireshark windows monitor mode wireshark windows monitor mode](https://blog.packet-foo.com/wp-content/uploads/2019/04/WiresharkMonitorModeCheckboxWorks.gif)
On other OSes, you would have to build and install a newer version of libpcap, and build Wireshark using that version of libpcap.
#Wireshark windows monitor mode mac os x#
"FreeBSD 8.0 and later, newer versions of some Linux distributions, and Mac OS X 10.6 (Snow Leopard) and later, come with libpcap 1.x, so versions of Wireshark built on and for those OSes should have the "Monitor mode" checkbox and the -I command-line flag.
![wireshark windows monitor mode wireshark windows monitor mode](https://www.nirsoft.net/utils/wifichannelmonitor.png)
Turning on monitor mode is dependent on which OS you're running it on. "In monitor mode the SSID filter mentioned above is disabled and all packets of all SSID's from the currently selected channel are captured.
#Wireshark windows monitor mode how to#
We teach you how to do it, use it at your own risk.
![wireshark windows monitor mode wireshark windows monitor mode](https://www.wireshark.org/docs/wsug_html_chunked/wsug_graphics/ws-capture-options.png)
Some Ethernet switches (usually called 'managed switches') have a monitor mode. I see you figured out that you need to use the GTK+ version if you want. in 'Edit Interface Settings', your adapter will turn into monitor mode immediately.