Q2 The SSID 'Home_Network' is operating on which channel?Ĭhannels are used to divide the WiFi band into multiple sections to share the same band without causing any interference.

Here is the combined filter I have used in the Wireshark wlan.fc.type = 0x0 & wlan.fc.type_subtype = 0x8 & = 0 To display only open networks, you can use = 0 filter. This information is carried in the Fixed Parameters Set of each beacon frame. If the WiFI access point is OPEN and no encryption or authentication is enabled, it will have privacy bit in the capabilities flag unset. To display all the beacon frames, you can use wlan.fc.type = 0x0 & wlan.fc.type_subtype = 0x8 filter. The type of management frame type is 0x0 and subtype of the beacon frame is 0x8, in the wireshark you can use the wlan.fc.type_subtype filter variable for this. This is a subtype management frame which contains the information about the WiFi and instructions to establish connection with it. Your WiFi access point broadcasts the beacon frame in the air medium after a specific interval of time which can be configured in the settings page as well. Q1 What is the name of the Open (No Security) SSID present in the packet dump? Use some monitoring tool on that proxy.The labs are using pretty older version of the Wireshark, logical operators combinations of the filters may vary, but the field names are hardly changed.From your CA create a key pair that where the CN corresponds to the site you want to monitor.

(may require using the IOS enterprise management tools) Install the CA certificate onto the IOS device.Basically you could setup your own CA.It will take quite a bit of work to actually get this setup. I suppose it isn't true to say you can't do it, but doing it requires steps I am not sure are possible on an IOS device. If you have the private keys provided by the server, then the details are covered in the wireshark docs.

If you could do this, then you could basically monitor any SSL traffic. If you want the payload and you don't have the private keys, then there is basically no way to do this easily. Possibly this means setting up an AP with the wired interface connected to a hub, which your monitoring system is also connected to. If you don't care about the payload, then just start wireshark on a device somewhere on your network that will see all the traffic.

Https wireshark filter