Ok I have been playing around with wireshark and I think I have all the info:
First get a copy of wireshark at
http://www.wireshark.org/ and install it.
Next connect to your network with ONLY your wireless adapter. If you have cat 5 (cabled) connection as well, disable it in your windows settings first (control panel/network/manage network connections). Some say it is not necessary, but this way you can see more of what is going on and it simplifies what you are trying to do. If you have another OS, I am sure you can do the same but I don't know the settings for the various OS's. Once you are connected to your Wifi network.
Start up wireshark.
In wireshark set up the right hardware network interface under edit/prefernces. Usually one will be bluetooth and one will be your normal WIFI connection. You might also see your cat 5/wired adapter/connection as well. Just be sure to to get the right wireless one. If unsure click capture/interfaces should tell you in the popup window by traffic, if still not sure click the details button on the far right and it will say which interface is what near the top.
You might need to start the driver if need be (wireshark complains about the service not running) open cmd (be sure to
run it as admin (right click run as admin) then enter:
sc qc npf.
it will tell you if it is running or not, among other details
to run it:
sc start npf
and to start it automatically:
sc config npf start=auto
to stop it:
sc stop npf
This is all under windows of course. Commands on other OS's may vary.
Next you may need to turn on Monitor mode, try promiscious mode first (capture menu -> options check enable promiscious mode on all interfaces) some cards will work well enough with this. If not then enable Monitor mode. This will allow you to capture any packets flying through the air. Click capture->options and click on the interface you are using and put a check in the box for monitor mode. If you don't have one, try
Acrylic WiFi this should give you a new interface that you can enable monitor mode with. If you still don't have that option, you may have to get a different Wifi adapter.
I originally said to use the capture filters but I think they are more problematic and I think it is better to capture all right now. Then filter out everything but the Wii traffic later before submitting. If you make a mistake on the filter later on, you can always refilter it again later.
Also if your network is encrypted (as most are) you need to give wireshark the keys. The details are
here. But in a nutshell go to
Edit->Preferences->IEEE 802.11. You will see a lot of protocols, look for IEEE 802.11 click on it then on the right check "encryption" then click "edit keys" and put in your password/keys there. Click apply on the keys window, then apply on the prefernces window then you can close them.
Now start the capture via capture menu at the top then start. You should only see a LOT of packet info scrolling in.
Now go and do something on the wii. Perhaps fire up the internet channel and go to a website. Then go back, stop the capture (via capture menu) and under analyze menu pick display filters and pick "IP address 192.168.0.1" but change the address to your Wii's address. If you have a lot of traffic from others with the same IP you might try filtering just the Wii's MAC/Ethernet address (looks something like this 10:38:25:01:06:15 and you can find it in your router's status where it shows all connected devices usually under a LAN tab, same spot as your Wii's IP address). At this point you are making sure you do indeed have data from the Wii. If you do then hard part is done.
Now go to the Wii and do the tests (start the game, connect to multiplayer, get a friend code, add friends, remove friends, mute someone if you have that option, connect to a game, play a round, disconnect from multiplayer etc). After you have done one game. Stop the capture and SAVE it (file menu the save as it will use wireshark default format unless you select something else)). I am not sure what format is preferred here, so you might want to do it in several formats. But be sure to use wireshark's native format. I know it can load and save to other formats later if need be.
Next start it again and do another game.
I am by no means a expert, so perhaps I missed something, but I think everything is here and anyone with a wifi enabled windows (or mac, or linux) machine can do. No special hardware required (by the looks anyway, as I said I NOT a
expert so if I missed something by all means correct me).
UPDATE:
I forgot to mention you need to be in monitor mode or you will only see your current machine's traffic. I have updated this to reflect that. Also some wifi cards don't like the Wireshark windows driver and won't let you go into monitor mode. If this is the case, then try Acrylic WIFI.
Acrylic WiFi installs drivers that Wireshark can use. Go
here and download the drivers, install them. Then start Wireshark as administrator (very important in this case) select the Acrylic WIFI NDIS interface that was added. You should be able to get all the packets in the area. Just remember to filter down to just your Wii
Or if you are concerned grab a full dump and do the filtering later before submitting it.
Oh one other thing I forgot to mention, if your network is encrypted you need to decrypt it. Wireshark can do this but you need to set up the passwords in the preferences. The details are
here
I have also updated this post regarding it as well.
If all else fails you can try Microsoft's Network Monitor
http://www.microsoft.com/en-us/download/details.aspx?id=4865 there is a simple tutorial at
here but I have my doubts that if wireshark won't work it is likely your WiFi adapter. Although I have read some saying the Microsoft Network Monitor did work when others didn't. So worth a try. And that video is talks about a USB Wifi adapter he bought for $40. But it may not be necessary as some built in adapters do work. Of course if one wants/needs to buy a adapter, I would go with getting one known to work well with Wireshark instead.
