Wireshark monitor mode not working
Distro : Arch Linux x86_64
Hi I'm trying to capture packets with Wireshark in monitor mode. I ran Wireshark with noraml user and selected interface wlp1s0. When I pushed the start button, the following error occured: Code:
Unknown message from dumpcap, try to show it as a string: Can't delete monitor interface mon1 (SIOCGIFINDEX: Bad file descriptor). Any ideas?? |
Its possible that your interface does not support promiscuous mode.
|
Okay.. do you know how to check which modes does the interfaces support?
|
My interface do support promiscuous mode
because Wireshark captures packets in promiscuous mode by default. Also there appears kernel message. Code:
[Jun 8 14:20] device wlp1s0 entered promiscuous mode The problem is I just can't start capturing in monitor mode. Code:
iw phy0 info |
All times are GMT -5. The time now is 07:24 PM. |