I know that free unencrypted-Wi-Fi is dangerous since all the traffic in the same AP is visible.

Does Wireshark capture all Wi-Fi traffic under the same access point even with WPA encryption?

  • 2
    That depends on how the capture device is configured and positioned. Captured encrypted traffic is still encrypted. If you mean that you want to read it as unencrypted, then you are out of luck.
    – Ron Maupin
    Jan 8 '20 at 6:22
  • I don’t think so. I just ran a “sudo tcpdump -i en0” on my Mac laptop while browsing some websites on my closely positioned iPad. My WiFi net uses WPA2-PSK with p2p communication allowed. I did not catch any Unicast between the iPad and the Internet in the tcpdump. Behavior may be different on other OS’. While product recommendations are off topic, metageek.com has some other tool options. FYI my access point is a Linksys C7000-1000NAS. Jan 8 '20 at 7:04
  • On my ubuntu 16.04, only things captured are QoS traffics and broadcast traffics. These traffics include hundreds of Bytes... I think I cannot even capture encrypted traffics.
    – mallea
    Jan 8 '20 at 8:06
  • If you did not capture other traffic, then you have not configured your capture host correctly. You can ask about host configuration on Super User.
    – Ron Maupin
    Jan 8 '20 at 14:38

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.