
Welcome to this "follow me" course!
In this first lecture, I am going to describe the problem/challenge of capturing Wi-Fi traffic using Wireshark. I will explain why this is and will set us up for what we will be doing in the rest of the class.
To follow me, you will need Wireshark installed. There are some instructions in the references.
Enjoy the class!
MAC users, follow me as I reveal how to solve the problem, and properly capture WI-FI/WLAN traffic.
Linux users, follow me as I reveal how to solve the problem, and properly capture WI-FI/WLAN traffic.
Windows users, follow me as I reveal how to solve the problem, and properly capture WI-FI/WLAN traffic.
Follow me to grab a Custom Profile for Wireshark that will focus you on Wi-Fi traffic analysis.
Follow me as we leverage the WLAN profile to look at how we can troubleshoot WLAN/WI-FI networks.
Welcome to this hands-on Wi-Fi and WLAN packet capture course using Wireshark!
This course is designed using a true “follow me” training methodology. There are no traditional slide decks, long theory presentations, or disconnected demonstrations. Instead, you will learn by actively following along step-by-step as we configure systems, capture wireless traffic, and analyze real packet data together in real time. The goal is to build practical skills through repetition, observation, and direct hands-on experience.
Throughout this course, you will learn how to properly capture Wi-Fi/WLAN traffic using Wireshark on Windows, macOS, and Debian-based Linux systems. While many people believe that selecting a wireless adapter in Wireshark and clicking “Start Capture” is enough to analyze wireless traffic, the reality is much more complicated. Most default captures only show a limited portion of the wireless conversation — typically just the data traffic associated with the local device. Critical wireless management and control frames such as Beacon Frames, Probe Requests, Probe Responses, Association Frames, De-Associations, Authentication traffic, RTS/CTS exchanges, and many other important WLAN frame types are often completely missing.
This course explains why capturing complete wireless traffic is challenging and why operating system limitations, wireless chipset capabilities, driver support, and monitor mode functionality all play major roles in successful Wi-Fi packet analysis. You will learn the differences between standard wireless captures and true monitor mode packet captures, along with the practical limitations that exist on various hardware and operating systems.
In addition to learning how to capture wireless traffic, students will begin developing foundational WLAN packet analysis skills using Wireshark. The course walks through the tools, techniques, configurations, adapters, and workflows required to successfully observe and analyze wireless network behavior in real-world environments. Whether your goal is troubleshooting Wi-Fi problems, learning wireless networking, improving visibility into WLAN operations, or preparing for more advanced wireless analysis, this course provides the practical foundation needed to begin working effectively with Wireshark in wireless environments.