So let's have a look at some of the package in detail and we'll analyze them with Wireshark.
So for this, I want you to open up the terminal screen and we'll first check the mode of the Wi-Fi
adapter.
And sure enough, it is on monitor mode.
Now, let's run Wireshark with route privileges.
Now, before capturing any traffic, we need to select a network interface on this list, so let's select
W Land Zero Mod and click on the capture button.
All right.
So now Wireshark is listening to network traffic.
As you can see, there are lots of beacon frames, probe requests and probe responses between the different
sources and destinations.
So we'll stop the capturing and we'll look at the details of the packets.
So in this section, there's time, source, destination, protocol length and detailed information
about the packet.
In the middle of the screen here, there's detailed information for a specific package.
Details about frame and header.
As you can see, this is a response packet, the frame control field contains the destination address
as well as the transmitter address of this packet.
And we can see the side and the wireless management feel.
We can customize the appearance of the results and the preferences under the edit tab.
And you can add a new field if you want to, and that will display in the columns.
So here you can select the type of field.
And I want to add frequency and channel information.
And there's a column that we added.
Now, this is one of the most important and widely used features of Wireshark, we can filter the scan
results, otherwise it's really kind of difficult to find the package that we want to view easily.
For example, when we want to list the packets related to specific access point, we can use this filter
just by giving the asset side name the access point.
Click on this button.
Now, all the packets of belong to this access point called Hacker Academy are here.
In addition, we can also filter by selecting any parameters.
So select any information there, right, click on it.
And I can quick apply his filter and select.
All right, so I filtered the management packets.
Now, let's display only beacon frames.
If you want to, you can select two filters and you can always do this with the and the selected option.
As you can see, it's added to this line with the end parameter.
All right, so now I'm listing beacon frames, sending broadcast signals, I'll add another filter to
display packets related to Packer Academy.
So Wireshark has many different filters.
According to the result that you want to see, you can find the most suitable filter even on the Internet.
I'd also like to show you some of the control management and data packets that I mentioned in the previous
lecture.
For example, we can see the request to send packets using subtype number 27 aunts and CTS are controlled
packets and they're the optional mechanisms to reduce frame collisions.
A certain type number of CTS packets 28.
So let's change the filter with this number, and there's only one CTS packet here.
Cool, so let's have a look at the other types of packets now.
You might not be able to see all packet types in your scan result.
So to analyze packet types, let's download the sample captures just right from the Internet.
Just type Wireshark sample captures.
And click on Wireshark website.
And there are lots of different examples of sample captures on this list.
So for now, let's find the Wi-Fi capturers.
And select one of the captured files here.
All right, so good, Wireshark, and we'll close this Skåne.
Open up the downloaded captcha file.
All right, so let's have a look at the package in this file.
And there are some authentication packets here, and these are the details of this packet.
And as you see, the subtype number is 11.
So we can use this filter to see only the authentication packet.
You can also see the details about the package by double clicking on it.
So finally, let's let's have a look at the data packet with subtype 32.
I look in the middle part, we can see the transmitted data in encrypted form in the data section.