CODEWITHSUNDEEP
wiresharkpacketswake-on-lan
Docfxit
Docfxit

Reputation: 165

Wireshark capture Magic Packet configuration

I have a laptop running Wireshark. I'd like to find out how to configure wireshark to capture Magic Packets.

I have selected the interface, options, Capture filter, host 192.168.168.19 , Ok, Start on the laptop.

Laptop is IP 192.168.168.14. I want to start up a PC at 192.168.168.19.

I have a program that sends out the Magic Packets called WON Magic Packet Sender. I run it and select send. I don't see anything captured in Wireshark. I have another program called VNC control. I select Wake Up. I get a message saying The WakeUp signal is sent. I still don't get anything captured in Wireshark. I remove the capture filter in Wireshark. I start the capture. I get everything on the network. I add a filter:

ip.src == 192.168.168.19 and ip.dst == 192.168.168.19

I get nothing captured after running both programs.
I removed the last filter and added a new filter:

ip.addr == 192.168.168.19

I get nothing captured after running both programs.

How can I configure Wireshark to capture the magic packets?

Upvotes: 0

Views: 7729

Answers (2)

Laurent Clapot
Laurent Clapot

Reputation: 11

Home I use "WOL" on filter, it's OK.

Sorry ten years to late :-)

Upvotes: 1

willyo
willyo

Reputation: 991

Given the definition of the WON frame pattern (and not knowing how it is encapsulated), I would expect a display filter like the following to work:

frame contains ff:ff:ff:ff:ff:ff:mm:mm:mm:mm:mm:mm

where mm:mm:mm:mm:mm:mm is the MAC address of the destination PC (the one to which the WON messge is being sent).

Upvotes: 0

Related Questions