Computer and IT knowledge - things to know
show ap association
> see clients connected to ap, and their bssid
pcap start <bssid> <ip of wireshark pc> <udp port of wireshark pc> 1 1000
> example: pcap start 55:44:77:33:99:cc 192.168.2.10 5555 1 10000
> no we see a capture id of the job, for example: pcap-id:2
on wireshark pc:
- Wireshark Capture Option
- Capture Filter: udp 5555
- no we see a lot of data, click of one of them, an say: "decode as PEEKREMOTE", now we see the wlan frames
- to see the packets of a specific client entere a filter, for example: wlan.addr aa:bb:cc:dd:ee:ff
stopping the capture on the controller:
> pcap stop <bssid> <session-number>
> for example: pcap stop 55:44:77:33:99:cc 2
https://www.youtube.com/watch?v=1O5vXmBulDE computer2know :: thank you for your visit :: have a nice day :: © 2024