I'm using Wireshark on OSX, trying to sniff my home network over WiFi. While I can see packets that are sent to/from the host I'm sniffing on, I'm not seeing anything else that goes over the WiFi. It's like I'm not in promiscuous mode or something (the promiscuous mode box is in fact checked).
The router is an Apple Airport Extreme, protected by WPA2. I'm attached to the network I'm trying to sniff, so I'm confused about why I can't see other traffic.
Edit: I solved this by the following:
- Plug Macbook directly into the Airport Extreme router
- Enable "internet sharing" on Macbook, with no password.
- Bind wireless device (the one I wanted to sniff) to the WiFi hotspot generated by Internet sharing in step 2.
- Run Wireshark on the Macbook, bound to device en1.
Don't forget to disable sharing after you're done. :-)