I own a Wireless network with WPA2. I would like to monitor what other users are doing on my network and to which sites they’re surfing to. I have a laptop which I can connect to the network, which has a wireless card which can handle managed and monitoring modes. I have Linux and Windows with Wireshark installed on this laptop. Is this configuration ok, if yes, how can I see other users packets in Wireshark?
Other software suggestions are also welcomed.


DAVID S
02. Sep, 2009
You will not be able to monitor other wireless users using wireshark via a wireless connection as every connection to the access point is encrypted.
You need to monitor the wired connection between the wireless access point and the switch that it connects to. If the wireless access point is also your router (eg in a home DSL setup) you will not be able to see the traffic.
If you have a switch that supports SPAN you can connect your laptop to the SPAN port and monitor there otherwise you need to connect a tap to the physical cable connecting the access point to the switch.
For more information about taps see http://en.wikipedia.org/wiki/Ethernet_ta…