From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LSVik-0003EL-JE for garchives@archives.gentoo.org; Thu, 29 Jan 2009 12:10:10 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id EC033E0371; Thu, 29 Jan 2009 12:10:07 +0000 (UTC) Received: from dd1232.kasserver.com (dd1232.kasserver.com [85.13.128.57]) by pigeon.gentoo.org (Postfix) with ESMTP id C08ADE0371 for ; Thu, 29 Jan 2009 12:10:07 +0000 (UTC) Received: from machine (p5DC176E1.dip.t-dialin.net [93.193.118.225]) by dd1232.kasserver.com (Postfix) with SMTP id 7A8BBD3997 for ; Thu, 29 Jan 2009 13:10:06 +0100 (CET) Date: Thu, 29 Jan 2009 13:46:34 +0100 From: Dominic Kexel To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: wlan0 promiscuous mode Message-Id: <20090129134634.9bdeee2e.nexenta@evil-monkey-in-my-closet.com> In-Reply-To: <49bf44f10901282123w6d5af17bp41626a2ec01922a3@mail.gmail.com> References: <49bf44f10901280900p33914cbci19ed49544757ee31@mail.gmail.com> <20090128171718.4D7B.1.NOFFLE@turbacz.local> <20090128204629.0ea80ad2.nexenta@evil-monkey-in-my-closet.com> <49bf44f10901282123w6d5af17bp41626a2ec01922a3@mail.gmail.com> X-Mailer: Sylpheed 2.5.0 (GTK+ 2.12.11; i686-pc-linux-gnu) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit X-Archives-Salt: e1236a68-416e-4831-9bdf-a02a66e10201 X-Archives-Hash: 0cf7cbc90cf39cd393d3ec098e08a096 On Wed, 28 Jan 2009 21:23:12 -0800 Grant wrote: > >> > Does anyone know how to put my USB wireless network adapter into > >> > promiscuous mode so I can see everything that's happening wirelessley > >> > on my network in wireshark? > >> > >> ifconfig eth1 promisc > >> > >> But at least tcpdump puts the interface into promiscous mode > >> automatically, so there is a chance that wireshark does the same. > >> > >> > > > > Another way is to use airmon-ng from the aircrack-ng package: > > > > airmon-ng start wlan0 > > I can't get that to work. I get: > > # airmon-ng start wlan0 > Interface Chipset Driver > wlan3 ath5k_pci - [phy0] > wlan0 Ralink 2573 USB rt73usb - [phy1]/usr/sbin/airmon-ng: line 338: > /sys/class/ieee80211/phy1/add_iface: No such file or directory > mon0: ERROR while getting interface flags: No such device > (monitor mode enabled on mon0) > > It looks like I'm supposed to have /sys/class/ieee80211/phy1/add_iface > which isn't there. I've tried with net.wlan0 started and stopped. > > - Grant Your driver has to support monitor-mode. I am using an Atheros-based internal WiFi-card and an Alpha-USB-WiFi-device with Realtek-Chip. The drivers I used a while ago needed a patch to work with monitor-mode, but the recent drivers don't. Take a look at the driver-section on the aircrack-ng homepage. Maybe your driver needs to be patched. -- Dominic Kexel