On Wed, May 16, 2012 at 1:57 PM, Justin Erenkrantz <jus...@erenkrantz.com> wrote: > On Wed, May 16, 2012 at 10:55 AM, Mark Phippard <markp...@gmail.com> wrote: >> I am trying Wireshark but it says I do not have any interfaces it can >> use. I am on a Macbook Air so maybe it needs an Ethernet adapter. >> Looking for other mac capture tools right now. > > As root, use: > > # tcpdump -w /tmp/mycapture.dump -i en0 -s 0 host cu121.cloud.sp.collab.net > > (This is assuming that en0 is your wireless adapter on your Mac.)
I found another tool that worked ( I think I just needed to run wireshark as root), however this tool and tcpdump both do not give what I want. I am going through a VPN and it looks like all the packets are encrypted. The protocol for all packets is ESP. -- Thanks Mark Phippard http://markphip.blogspot.com/
