Skip to content
Brannon Dorsey edited this page Mar 15, 2015 · 12 revisions

Receive Probe Requests with Tshark

Make sure that your wireless card is up using ifconfig. If it is not then you can bring it up with:

# sudo ifconfig <device_name> up
sudo ifconfig wlan0 up

Next, set the device in monitor mode:

# sudo ifconfig <device_name> mode monitor
sudo ifconfig wlan0 mode monitor

This should drop your wlan0 device into monitor mode. Now start tshark with filter to only collect probe requests:

# tshark -i <device_name> -n -l subtype probereq [|]
tshark -i wlan0 -n -l subtype probereq

You should now receive a stream of probe requests to stdout. You can easily pipe the output of tshark by appending | to the end of the command.

Clone this wiki locally