how to turn off promiscuous mode in wireshark. But. how to turn off promiscuous mode in wireshark

 
 Buthow to turn off promiscuous mode in wireshark  This is one of the methods of detection sniffing in local network

The following will show what capabilities the wifi interface has. To disable promiscuous mode on the physical NIC, run the following command on the XenServer text console: # ifconfig eth0 –promisc. someone is using promiscuous mode in custom network to sniffing packet (security onion, Wireshark, tcpdump)? Because It is impossible for me. Technically, there doesn't need to be a router in the equation. That sounds like a macOS interface. telling it to process packets regardless of their target address if the underlying adapter presents them. tshark, at least with only the -p option, doesn't show MAC addresses. Click the Configuration tab. The current firmware is not supported. Disable Promiscuous mode “Please turn off promiscuous mode for this device” You can turn on promiscuous mode by going to Capture -> Options. 1 I am in promiscuous mode and I am using my one computer to sniff the network traffic. For support and information on loading the 802. When a network interface is placed into promiscuous mode, all packets are sent to the kernel for processing, including packets not destined for the MAC address of the network interface card. 11 adapter will only supply to the host packets of the SSID the adapter has joined, assuming promiscuous mode works at all; even if it "works", it might only supply to the host the same packets that would be seen in non-promiscuous mode. 2 running on a laptop capturing packets in promiscuous mode on the wireless interface. (3) I set the channel to monitor. I start Wireshark (sudo wireshark) and select Capture | Options. 0. If I am looking to capture traffic that is flowing in and out of my node, do I take wireshark off of promiscuous mode? promiscuous. Still I'm able to capture packets. (my other options there are: QoS. 200, another host, is the SSH client. DallasTex ( Jan 3 '3 ) To Recap. Guy Harris ♦♦. How do I get and display packet data information at a specific byte from the first. You can now observe few things. A question in the Wireshark FAQ and an item in the CaptureSetup/WLAN page in the Wireshark Wiki both mention this. Sure, tell us where your computer is, and let us select Capture > Options and click the "Promisc" checkbox for that interface; that wil turn off promiscuous mode. After following the above steps, the Wireshark is ready to capture packets. If you. From the Promiscuous Mode dropdown menu, click Accept. Go back to Wireshark and stop the capture. 50. can see its traffic as TCP or TLS, but not HTTP. Start packet capturing by clicking “Capture” → “Start” button. You can also check Enable promiscuous mode on all interfaces, as shown in the lower left-hand corner of the preceding screenshot. 4. . 18 ~ 4. This is most noticeable on wired networks that use. 168. 11 adapter will only supply to the host packets of the SSID the adapter has joined, assuming promiscuous mode works at all; even if it "works", it might only supply to the host the same packets that would be seen in non-promiscuous mode. After sniffing on the tunnel interface, it worked for me. Capturing in promiscuous mode. pcap_set_promisc returns 0 on success or PCAP_ERROR_ACTIVATED if called on a capture handle that has been activated. Tap “Capture. 168. Disable Promiscuous mode. 212. The only way to experimentally determine whether promiscuous mode is working is to plug your computer into a non-switching hub, plug two other machines into that hub, have the other two machines exchange non-broadcast, non-multicast traffic, and run a capture program such as Wireshark and see whether it captures the traffic in question. Promiscuous Mode فى هذا الفيديو سوف نتعرف على اختيار Passive TAP وسوف نقوم بشرح اهمية استخدام هذا الاختيار فى عمل التقاط. As the Wireshark Wiki page on decrypting 802. In the 2. Intel® 10 Gigabit Server Adapter. It is a network security, monitoring and administration technique that enables access to entire network data packets by any configured network adapter on a. – I guess you can't sniff wirelessly on windows. Figure 4. How to turn off promiscuous mode on a NIC. Select the ESXi/ESX host in the inventory (in this case, the Snort server). Choose the right network interface to capture packet data. Wireshark has versions for Windows and OSX all ready to go with installers. In such a case it’s usually not enough to enable promiscuous mode on your own NIC, but you must ensure that you’re connected to a common switch with the devices on which you want to eavesdrop, and the switch must also allow promiscuous mode or port mirroring. Use Wireshark as usual. . Click Properties of the virtual switch for which you want to enable promiscuous mode. My conclusion is, I'm not in promiscuous mode. So, doing what Wireshark says, I went to turn off promiscuous mode, and then I get a blue screen of death. Add Answer. Yes, that's driver-dependent - some drivers explicitly reject attempts to set promiscuous mode, others just go into a mode, or put the adapter into a mode, where nothing is captured. Without promisc mode only packets that are directed to the machine are collected, others are discarded by the network card. That sounds like a macOS interface. In the Installation Complete screen, click on Next and then Finish in the next screen. From the Promiscuous Mode dropdown menu, click Accept. Optionally, this can be disabled by using the -p parameter in the command line, or via a checkbox in the GUI: Capture > Options > Capture packets in promiscuous mode. See. Yes, it's free. That reflects the actual promiscuity count of the device: promiscuity > 0 means that the device is in promiscuous mode. ) When I turn promiscuous off, I only see traffic to and from my PC and broadcasts and stuff to . If your kernal version is not included, you may not be able to use it. But there's no. Open your command prompt and ping the address of your choice. Wireshark doesn't ask what connection (Ethernet, Wi-Fi, etc. wireshark –h : show available command line parameters for Wireshark. Sometimes there’s a setting in the driver properties page in Device Manager that will allow you to manually set promiscuous mode if Wireshark is. Click the Network Adapters tab. Click the Security tab. KDAM71 ( Sep 28 '3 ) That's useful, I'll add that to the wiki page. After that, you have to tell Wireshark the passphrase to your WLAN. One Answer: Normally a network interface will only "receive" packets directly addressed to the interface. 'The capture session could not be initiated (failed to set hardware filter to promiscuous mode). 0. 0. 0. 1 GTK Crash on long run. 0 packets captured PS C:> tshark -ni 5 Capturing on 'Cellular' tshark: The capture session could not be initiated on interface 'DeviceNPF_{CC3F3B57-6D66-4103-8AAF-828D090B1BA9}' (failed to set hardware. By default, the driver in promiscuous mode does not strip VLAN tags. Wireshark 3. Or you could do that yourself, so that Wireshark doesn't try to turn pomiscuous mode on. Click on it to run the utility. or, to be more specific: when a network card is in promiscuous mode it accepts all packets, even if the. As soon as you double-click the interface’s name, you’ll see the packets start to appear in. e. As the Wireshark Wiki page on decrypting 802. See the Wiki page on Capture Setup for more info on capturing on switched networks. 6. You'll only see the handshake if it takes place while you're capturing. For the network adapter you want to edit, click Edit . In the current version (4. Am I missing something over here?If I stop wireshark capture, the pings start right back up. Here are the first three lines of output from sudo tshark -i enp2s0 -p recently: enp2s0 's ip address is 192. Clicked on "Local Area Connection", then "Properties", bringing me to the dialog box you highlighted. 1 Answer. This data stream is then encrypted; to see HTTP, you would have to decrypt first. sudo ifconfig wlan0 down sudo iwconfig wlan0 mode Monitor sudo ifconfig wlan0 up This will simply turn off your interface, enable monitor mode and turn it on again. This is one of the methods of detection sniffing in local network. You probably want to analyze the traffic going through your. ) I'm on when it starts up. No packets captured! As no data was captured, closing the temporary capture file! Help about capturing can be found at:pcap_set_promisc sets whether promiscuous mode should be set on a capture handle when the handle is activated. Click Properties of the virtual switch for which you want to enable promiscuous mode. 11 says, "In order to capture the handshake for a machine, you will need to force the machine to (re-)join the network while the capture is in progress. " Note that this is not a restriction of WireShark but a restriction due to the design of protected. @Kurt: I tried with non-promiscuous mode setting and still am not able to capture the unicast frames. Asked: 2021-06-14 20:25:25 +0000 Seen: 312 times Last updated: Jun 14 '21 Wireshark 2. Please check that "DeviceNPF_ {27E9DDAE-C3B4-420D-9009. Even in promiscuous mode, an 802. The error: The capture session could not be initiated on capture device "\Device\NPF_{C549FC84-7A35-441B-82F6-4D42FC9E3EFB}" (Failed to set hradware filtres to promiscuos mode: Uno de los dispositivos conectados al sistema no funciona. On the windows command line you can use the command "netsh wlan show wirelesscapabilities" to check. In the Hardware section, click Networking. This is were it gets weird. No CMAKE_C(XX)_COMPILER could be found. Instructions can be found e. 1q module. Open Wireshark. There are other protocols that can be used, too, like QUIC, or flowing over a VPN tunnel which would then hide the traffic, by design, from simple filters. But this does not happen. 4. 50. VPN / (personal). Below is a packet sniffing sample between two different machines on the same network using Comm View. Wireshark - I can't see traffic of other computer on the same network in promiscuous mode 0 How to use Wireshark to capture HTTP data for a device on the same network as me Promiscuous mode is a type of computer networking operational mode in which all network data packets can be accessed and viewed by all network adapters operating in this mode. Please update the question with the output of wireshark -v or the Help->About Wireshark: Wireshark tab. In the Hardware section, click Networking. (net-tools) or (iproute2) to directly turn on promiscuous mode for interfaces within the guest. To enable promiscuous mode on an interface:When I startup Wireshark (with promiscuous mode on). answered 26 Jun '17, 00:02. Run the ifconfig command again and notice that promiscuous mode is now disabled. I see every bit of traffic on the network (not just broadcasts and stuff to . I've checked options "Capture packets in promiscuous mode" on laptop and then I send from PC modified ICMP Request (to correct IP but incorrect MAC address). To reset your NIC back to normal, issue the same commands, but with mode Managed. I can capture the traffic for my machine on en0 interface but not for any other device on my network. last click on start. You can. My first post. You will now see a pop-up window on your screen. Stupid me. Promiscuous mode allows the interface to receive all packets that it sees whether they are addressed to the interface or not. Promiscuous Mode فى هذا الفيديو سوف نتعرف على اختيار Passive TAP وسوف نقوم بشرح اهمية استخدام هذا الاختيار فى عمل التقاط. To cite from the WireShark Wiki: "However, on a "protected" network, packets from or to other hosts will not be able to be decrypted by the adapter, and will not be captured, so that promiscuous mode works the same as non-promiscuous mode. (31)) Please turn off promiscuous mode for this device. Note that not all network interface cards support monitor mode. The problem now is, when I go start the capture, I get no packets. Steps: (1) I kill all processes that would disrupt Monitor mode. Please turn off promiscuous mode for this device. Although it can receive, at the radio level, packets on other SSID's, it. x release of Wireshark won't report the bit about sufficient permissions, because that should only be reported for a true permissions problem, which this isn't. 0. link. I would expect to receive 4 packets (ignoring the. 11 card drivers on Windows appear not to see any packets if they're running in promiscuous mode. On a switched network you won't see the unicast traffic to and from the client, unless it's from your own PC. Note: The setting on the portgroup overrides the virtual switch. After a while (15 to 20 seconds), stop capturing (“Capture” → “Stop”). When I start wireshark on the windows host the network connection for that host dies completely. No CMAKE_C(XX)_COMPILER could be found. From the Promiscuous Mode dropdown menu, click Accept. Click on it to run the utility. This is done from the Capture Options dialog. I have turned on promiscuous mode using sudo ifconfig eth0 promisc. Intel® PRO/10 Gigabit. Complete the following set of procedures: xe vif-unplug uuid=<uuid_of_vif>xe vif-plug uuid=<uuid_of_vif>. If you are capturing traffic to/from the same host as the. You can disable promiscuous mode for that interface in the menu item Capture -> Capture Options. 168. Hello I am trying to use monitor mode on wireshark I turned on the monitor mode by the following command. 168. It is a network security, monitoring and administration technique that enables access to entire network data packets by any configured network adapter on a host system. g. On a switched network you won't see the unicast traffic to and from the client, unless it's from your own PC. Tap “Capture. If everything goes according to plan, you’ll now see all the network traffic in your network. Choose the right location within the network to capture packet data. Yes, I tried this, but sth is wrong. As far as I know if NIC is in promisc mode it should send ICMP Reply. I have also tried connecting an ixia to the PC with Wireshark and pumping packets directly to PC. 8) it is stored in preferences and the state is saved when exiting and set upon re-entering the gui. That does not mean it hasn't been done though. Next to Promiscuous mode, select Enabled, and then click Save. 0. 0. –a means automatically stop the capture, -i specifies which interface to capture. asked 08 May '15, 11:15. Wireshark has a setting called "promiscuous mode", but that does not directly enable the functionality on the adapter; rather it starts the PCAP driver in promiscuous mode, i. Normally we don't close questions, instead the best answer is accepted (to inform others) by clicking the checkmark icon next to the answer. 50. Click on Next and then Finish to dismiss that dialogue window. I have WS 2. In non-promiscuous mode, you’ll capture: * Packets destined to your network. The Wireshark installation will continue. Wireshark automatically puts the card into promiscuous mode. The adapter TL-WN725N,V3 supports linux Kernel Version 2. Wireshark has a setting called "promiscuous mode", but that does not directly enable the functionality on the adapter; rather it starts the PCAP driver in promiscuous mode, i. 0. I already set port mirroring with my physical mac address, so I wonder that just change MonitorMode=0 can disable premiscuous mode. Wireshark works roughly the same way. Try turning promiscuous mode off; you'll only be able to see packets sent by and received by your machine, not third-party traffic, and it'll look like Ethernet traffic and won't include any management or control frames, but. I'm able to capture packets using pcap in lap1. Broadband -- Asus router -- PC : succes. The only way to experimentally determine whether promiscuous mode is working is to plug your computer into a non-switching hub, plug two other machines into that hub, have the other two machines exchange non-broadcast, non-multicast traffic, and run a capture program such as Wireshark and see whether it captures the traffic in question. Wireshark error:The capture session could not be initiated on interface "DeviceNPF_Loopback" (Error opening adapter: The system cannot find the path specif. In the current version (4. -DHAVE_RX_SUPPORT. But. grahamb. Standard network will allow the sniffing. So it looks as if the adaptor is now in monitor mode. Click the Network Adapters tab. Sure, tell us where your computer is, and let us select Capture > Options and click the "Promisc" checkbox for that interface; that wil turn off promiscuous mode. 01/29/2020. 0. Thanks in advance How to turn off promiscuous mode on a NIC. After that, you have to tell Wireshark the passphrase to your WLAN. It's on 192. To turn on promiscuous mode, click on the CAPTURE OPTIONS dialog box and select it from the options. In computer networking, promiscuous modes is ampere mode of operation, because well as a protection, security and administration technique. 1 Answer. Next, on the home screen double-click the name of a network interface under Capture to start capturing packets on that interface. views 1. And since linux has many branches, we cannot provide some help for it. Reboot. 0. The wireshark application is running on my computer that is wired. : capture traffic on the ethernet interface one for five minutes. Currently have a v7 host setup with a dedicated NIC for capture; mirrored switch port cabled into specific port on new NIC. Although it can receive, at the radio level, packets on other SSID's, it. 50. To enable promiscuous mode on a physical NIC, run this command -- as laid out by Citrix support documents for its XenServer virtualization platform -- in the text console: # ifconfig eth0 promisc. Promiscuous Mode NIC Adapter Setup Required? 2 Answers: 0 Click on Edit > Preferences > Capture and you'll see the preference "Capture packets in. It doesn't receive any traffic at all. " "The machine" here refers to the machine whose traffic you're trying to. Look in your Start menu for the Wireshark icon. Running Wireshark with admin privileges lets me turn on monitor mode. 3, “The “Capture Options” input tab” . 200, another host, is the SSH client. 23720 4 929 227 On a switched network you won't see the unicast traffic to and from the client, unless it's from your own PC. Uncheck promiscuous. In the above, that would be your Downloads folder. It is not, but the difference is not easy to spot. Select the virtual switch or portgroup you wish to modify and click Edit. A: At least some 802. You can capture on all interfaces, but make sure you check Promiscuous, as shown in the preceding screenshot, as one of the column. "What failed:. e. But again: The most common use cases for Wireshark - that is: when you run the. wireshark –a duration:300 –i eth1 –w wireshark. Thanks for the help. (03 Mar '11, 23:20). The only way to experimentally determine whether promiscuous mode is working is to plug your computer into a non-switching hub, plug two other machines into that hub, have the other two machines exchange non-broadcast, non-multicast traffic, and run a capture program such as Wireshark and see whether it captures the traffic in question. Broadband -- Asus router -- WatchGuard T-20 -- Switch -- PC : fail. Intel® PRO/1000 Gigabit Server Adapter. (The problem is probably a combination of 1) that device's driver doesn't support. Choose the interface. When you select Options… (or use the corresponding item in the main toolbar), Wireshark pops up the “Capture Options” dialog box as shown in Figure 4. Sort of. But again: The most common use cases for Wireshark - that is: when you. Run the ifconfig command, and notice the outcome: eth0 Link encap:Ethernet HWaddr 00:1D:09:08:94:8A Wireshark will try to put the interface on which it’s capturing into promiscuous mode unless the "Capture packets in promiscuous mode" option is turned off in the "Capture Options" dialog box, and TShark will try to put the interface on which it’s capturing into promiscuous mode unless the -p option was specified. Promiscuous mode monitors all traffic on the network, if it's not on it only monitors packets between the router and the device that is running wireshark. Tap “Interfaces. What happens if you hold down "Option" and click on the Wi-Fi icon in the menu bar, select "Open Wireless Diagnostics" from the menu, and: don't click "Continue" in the "Wireless Diagnostics" window, but, instead, click "Window" in the menu bar and select "Sniffer"; click "Start" in the Sniffer window. If you are unsure which options to choose in this dialog box, leaving the defaults settings as they are should work well in many cases. 0. ps1 - Shortcut and select 'Properties'. I'm running Wireshark on my wpa2 wifi network on windows. Next, on the home screen double-click the name of a network interface under Capture to start capturing packets on that interface. 11 card drivers on Windows appear not to see any packets if they're running in promiscuous mode. Instructions can be found e. 73 (I will post a debug build later that is preferable, but the standard version is fine, too). Try turning promiscuous mode off; you'll only be able. Go ahead and capture with promiscuous mode on or off. Click on Next and then Finish to dismiss that dialogue window. Or you could do that yourself, so that Wireshark doesn't try to turn pomiscuous mode on. How do I turn off promiscuous mode? Disable Promiscuous Mode. This is how the pcap library works now and the fact that wireshark (and a dozen other. You probably want to analyze the traffic going through your. As people have said, however, WiFi is mostly encrypted so at a lower level your system can. 6. If you are capturing (sniffing) traffic on a LAN with one subnet, you do not need promiscuous mode or monitor mode to do this. 1k. 50. As the article, only set MonitorMode=2 as work as promiscuous Mode? hypervPromiscuousModeSetUp Here says that set MonitorMode=2 and also set physical mac address on host computer to do port mirroring. I'm using an alfa that IS capable of promiscuous and monitor mode. Install Npcap 1. This is one of the methods of detection sniffing in local network. I've checked options "Capture packets in promiscuous mode" on laptop and then I send from PC modified ICMP Request (to correct IP but incorrect MAC address). But as soon as I check the Monitor box, it unchecks itself. 11 says, "In order to capture the handshake for a machine, you will need to force the machine to (re-)join the network while the capture is in progress. If you still experience a problem after checking the above you may try to figure out if it's a Wireshark or a driver problem. To enable promiscuous mode on a physical NIC, run this command -- as laid out by Citrix support documents for its. Given the above, computer A should now be capturing traffic addressed from/to computer B's ip. Re:Re:Re:Promiscuous mode. Use the File Explorer GUI to navigate to wherever you downloaded Enable-PromiscuousMode. In promiscuous mode, a connect device, that as an adapter on a crowd system, can intercept and read in you entirety any network packet that arrives. Please provide "Wireshark: Help -> About Wireshark -> Copy to Clipboard. Tried disabling and packet capture still not functioning. Sorted by: 4. The first one is how to turn your interface into monitor mode so you can (possibly) see all wifi traffic in the RF environment around you. Wireshark now has a discord server! Join us to discuss all things packets and beyond! Ask and answer questions about Wireshark, protocols, and Wireshark development. Somehow, having BOTH monitor mode enabled in NICs (which allows me to see the VLAN tag in RX frames in wireshark) and wireshark in capture mode, the pinging fails. 8 and NPCAP 1. answered 26 Jun '17, 00:02. 2 kernel (i. Promiscuous mode allows the interface to receive all packets that it sees whether they are addressed to the interface or not. Uncheck. Return value. (failed to set hardware filter to promiscuous mode: A device attached to the system is not functioning. Here’s the process. There are other protocols that can be used, too, like QUIC, or flowing over a VPN tunnel which would then hide the traffic, by design, from simple filters. 41, so in Wireshark I use a capture filter "host 192. SRX1400,SRX3400,SRX3600,SRX5800,SRX5600. Describe the bug After Upgrade. 11n and the Laptop is HP Pavillion 14-ab167us. Open Wireshark and start the capturing process as described above. I have 3 network participants: An open (no WEP, no WPA, no Encryption ) wireless access point (AP) at 10. Chuckc ( Sep 8 '3 )1 Answer. The only way to experimentally determine whether promiscuous mode is working is to plug your computer into a non-switching hub, plug two other machines into that hub, have the other two machines exchange non-broadcast, non-multicast traffic, and run a capture program such as Wireshark and see whether it captures the traffic in question. or, to be more specific: when a network card is in promiscuous mode it accepts all packets, even if the. There are several packets captured by your system. (The problem is probably a combination of 1) that device's driver doesn't support. What happens if you hold down "Option" and click on the Wi-Fi icon in the menu bar, select "Open Wireless Diagnostics" from the menu, and: don't click "Continue" in the "Wireless Diagnostics" window, but, instead, click "Window" in the menu bar and select "Sniffer"; click "Start" in the Sniffer window. To reset your NIC back to normal, issue the same commands, but with mode Managed. Even in promiscuous mode, an 802. 0 and NPCAP 1. The WLAN adaptor now has a check box in the column "Monitor" which is not present if the adaptor is in managed mode. TP-Link is a switch. Wireshark will start capturing network packets and display a table. I want to turn promiscuous mode on/off manually to view packets being sent to my PC. . The capture session could not be initiated (failed to set hardware filter to promiscuous mode) Try using the Capture -> Options menu item, selecting the interface on which you want to capture, turn off promiscuous mode, and start capturing. wireshark enabled "promisc" mode but ifconfig displays not. p2p0. wireshark –a duration:300 –i eth1 –w wireshark. This step automatically enables the Intel Networking hardware offload capabilities to offload VLAN tag stripping and insertion. Promiscuous mode**Wireshark: Promiscuous Mode. Sorted by: 4. sudo ifconfig wlan0 down sudo iwconfig wlan0 mode Monitor sudo ifconfig wlan0 up This will simply turn off your interface, enable monitor mode and turn it on again. wireshark : run Wireshark in GUI mode. Wireshark - I can't see traffic of other computer on the same network in promiscuous mode 0 How to use Wireshark to capture HTTP data for a device on the same network as mePromiscuous mode is a type of computer networking operational mode in which all network data packets can be accessed and viewed by all network adapters operating in this mode. 255. Note: The setting on the portgroup overrides the virtual. edit flag offensive delete link more add a comment. Sure, tell us where your computer is, and let us select Capture > Options and click the "Promisc" checkbox for that interface; that wil turn off promiscuous mode. Or you could do that yourself, so that Wireshark doesn't try to turn pomiscuous mode on. answered Feb 20 '0. 1 Client A at 10. On a wired Ethernet card, promiscuous mode switches off a hardware filter preventing unicast packets with. To configure a monitoring (sniffer) interface on Wireshark, observe the following instructions: Click on Capture | Options to display all network interfaces on the local machine: Select the appropriate network interface, select Enable promiscuous mode on all interfaces, and then click Start to begin capturing network packets: The Packet List. : capture traffic on the ethernet interface one for five minutes. If promisc is non-zero, promiscuous mode will be set, otherwise it will not be set. Try capturing using the Capture > Options menu item and unchecking the promiscuous mode check box for the interface before starting the capture. answer no. 60 work just fine with no errors. g. 168. " Note that this is not a restriction of WireShark but a restriction due to the design of protected WLAN. promiscuous mode in custom network. 3 All hosts are running Linux. Hi, I am using wireshark v3. Or you could do that yourself, so that Wireshark doesn't try to turn pomiscuous mode on. Next, on the home screen double-click the name of a network interface under Capture to start capturing packets on that interface. If no crash, reboot to clear verifier settings. This will allow you to see all the traffic that is coming into the network interface card. Since you're on Windows, my recommendation would be to update your Wireshark version to the latest available, currently 3. tshark, at least with only the -p option, doesn't show MAC addresses. Select the virtual switch or portgroup you wish to modify and click Edit. Since you're on Windows, my recommendation would be to update your Wireshark version to the latest available, currently 3. If so, when you installed Wireshark, did you install all the components? If not, try re-installing and doing so; one of the components should make it possible for non-root users to capture traffic. The wireless adapter being used is Broadcom 802.