Join GitHub today
GitHub is home to over 40 million developers working together to host and review code, manage projects, and build software together.Sign up
Unable to capture raw Wi-Fi packets with supported adapter (NETGEAR A6210) #1778
I have a system that I have been trying to convert from using AirPcap and WinPcap to using a network adapter and Npcap to capture raw 802.11 traffic. However, up to this point I have been entirely unable to view any traffic at all in Wireshark, despite selecting an appropriate adapter from https://secwiki.org/w/Npcap/WiFi_adapters (NETGEAR A6210), and enabling monitor mode using wlanhelper.
When I start the capture on the appropriate device, no packets are received whatsoever. I am fairly certain based on the wiki page that the device I selected should work, and that based on the output I receive from wlanhelper that it has been properly set to monitor mode. Wireshark then shows that it does allow monitor mode, but when I ensure that the monitor mode box is checked, there are no packets seen by the device. Based on some strange issues I receive in using wlanhelper I wonder if my issue lies with Npcap specifically.
I have checked (and tried deleting) the Packet.dll and wpcap.dll files located in C:/Windows/System32 and C:/Windows/SystemWOW64 (Leaving the ones in their respective \Npcap\ folder alone) as some users had deemed helpful in the comments of a blog post, but with no luck there.
I have tried other machines that had never had WinPcap or Npcap installed to try for a more "fresh" environment.
Below is a sample of the output I receive when trying a few different actions in wlanhelper.
I have made sure that my drivers for my network device match those detailed in the wiki link that I found it in.
Please, if you have any ideas for how I can fix this issue, I have spent upwards of 50 to 60 hours trying to fix these issues. If there is any more data I can provide let me know.