I assume you mean you cannot see the L3 info. You would either have to turn off encryption in your AP and laptop or enter the encryption key in wireshark.
--- On Sun, 3/22/09, Dani Camps <danicamps81@xxxxxxxxx> wrote:
> From: Dani Camps <danicamps81@xxxxxxxxx>
> Subject: [Wireshark-users] Wireless Sniffer
> To: wireshark-users@xxxxxxxxxxxxx
> Date: Sunday, March 22, 2009, 12:20 PM
>
> Dear all,
>
> I have an IBM T43 laptop with Linux on it and an Intel
> 2915a/b/g WiFi chipset. I can put the wireless interface in
> monitor mode and then I see using wireshark all the Layer 2
> (802.11) traffic going on on my wireless network. However,
> when I examine a captured packet wireshark stops at layer 2,
> so I can not see the higher layer info (TCP, UDP ,...).
>
> Is there any way to set my wireless card in monitor mode
> but capture the traffic at above L2, so that I would see a
> "normal" wireshark capture with all the info about layer 3
> and above ?
>
> Best Regards
>
> Daniel
>
>
>
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
>
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe
>
