Skip to content

Instantly share code, notes, and snippets.

@joshschmelzle

joshschmelzle/tshark-802.11-macos-notes.md

Last active December 9, 2019 13:58
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save joshschmelzle/c4d836fde6e57875e89ad2e8021a60be to your computer and use it in GitHub Desktop.
Save joshschmelzle/c4d836fde6e57875e89ad2e8021a60be to your computer and use it in GitHub Desktop.
Download ZIP
tshark'n 802.11 on macos notes and cheatsheet
Raw
tshark-802.11-macos-notes.md

Prep:

Create a symlink to the AirPort command in Terminal:

ln -s /System/Library/PrivateFrameworks/Apple80211.framework/
Versions/Current/Resources/airport /Usr/bin/airport

# test utility
airport -I
airport -s

# disassociate

sudo airport -z

# set/verify channel

sudo airport --channel 36
sudo airport --channel

or

sudo airport -c36
sudo airport -c

Basics:

tshark -v         # show version
tshark -D         # list interfaces
tshark -Ini en1   # basic catch all

Probes:

tshark -Ini en1 type mgt subtype probe-req

touch test.pcap
chmod o=rw test.pcap
sudo tshark -Ini wlan0 -w test.pcap type mgt
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment