Wireshark doesn't capture 802.11 data packets -

lately have been trying analyze wifi traffic on own test router. looked on wireshark website on how , setup own testing network.

my network:

-dd-wrt router wpa2 personal mixed security using tkip+aes.

-kali linux capture machine wireshark 1.8.5

-android phone producing traffic

i put wireless interface of kali laptop monitor mode user airmon-ng

airmon-ng start wlan0 

to check if created monitor interface(mon0) worked use airodump-ng. when knew monitor interface working, started wireshark. selected mon0 capture interface , pressed options. in capture options put mac adress of router, got through airodump-ng, in capture filter area.

i take care of packet decryption needed me see actual data. went following webpage: http://wiki.wireshark.org/howtodecrypt802.11

i followed instructions there.(only way need put in decryption keys different key#1 system described on page. new window in need select security method wep,wpa-pwd or wpa-psk , input key). used wireshark wpa psk generator tool right pre-shared key.

http://www.wireshark.org/tools/wpa-psk.html

essid: "testnet"

password: "wachtwoord"

psk: 33fe484e651381b15859e539279f2991c0f5e5e751ef17f82104d4ad528718ca

i put in 2 new keys. 1 being wpa-pwd wachtwoord value. second being wpa-psk psk mentioned above value.

i applied settings, , checked enable decryption checkbox.

so clicked start capture button , saw whole bunch of beacon frames rolling in. associated android phone ap knew capture eapol packets(i checked using filter , had 4 packets).

after filtering "data", saw didn't capture data packets.

i expected see actual traffic, not case. airdecap-ng did not see wpa packets in capture file.

my theory left after hours of puzzeling lack of driver support. please tell me doing wrong?

thank you!

tl;dr: computer not capture 802.11 wpa2 data packets, , can't figure out why.

have checked if can capture wifi frames in open/none security? if doesn't work open/none, need fix setup before being able capture wpa2/aes traffic.

steps used check wifi capture setup: - configure ap open/none (open authentication, no encryption). - add monitor interface:

$ sudo iw phy phy0 interface add moni0 type monitor $ sudo ifconfig moni0 

• set channel of (same between ap , laptop). avoid popular ch1,6,11 (use channel 7, example) reduce amount of captured traffic.
• some wireless cards not support monitor mode well, may worth avoid 802.11n, use 802.11b/g only.