From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LSWlj-0002Ls-3y for garchives@archives.gentoo.org; Thu, 29 Jan 2009 13:17:19 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id C5296E03A4; Thu, 29 Jan 2009 13:17:16 +0000 (UTC) Received: from mail-qy0-f20.google.com (mail-qy0-f20.google.com [209.85.221.20]) by pigeon.gentoo.org (Postfix) with ESMTP id 96C02E03A4 for ; Thu, 29 Jan 2009 13:17:16 +0000 (UTC) Received: by qyk13 with SMTP id 13so12331295qyk.10 for ; Thu, 29 Jan 2009 05:17:16 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:date:from :user-agent:mime-version:to:subject:references:in-reply-to :content-type:content-transfer-encoding; bh=5ymqlzhkTAtOTuXQyluUHS4PYpLvhGJWINGOyRxVOI8=; b=dooiKKwSGdoaCisSiY4MfRX2Us2kFpdV1XYwagnMnRk/9B41jAgCmnql2LnIN5IioH eJQ8MMJFxatkgb14UknBNPv8J86oIFfBXzPqEzkLA0kZcd6y8DZWNV8QdqQz0keIkn02 hIet0OW+j8mNbjRl3ewSbFrdkfsO1tdX+YUy8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:date:from:user-agent:mime-version:to:subject:references :in-reply-to:content-type:content-transfer-encoding; b=XfY631L6DEIabgHlYn72FNqumI7soKK6JWvzVg/8B93m+JOQZT2qnfyL1JWnFroPk0 MqILgpTZ2wl+07wD/dEMiq1VzH3+0GzPtfTyNJy6ImFzA9LJqfNtssQp65y+93Hx4CLT gObEtFuAtB4koWlBhrujj2bGsUo3ZehtfrX4E= Received: by 10.215.38.17 with SMTP id q17mr138224qaj.94.1233235036315; Thu, 29 Jan 2009 05:17:16 -0800 (PST) Received: from gentoo-everex.local (cpe-72-185-60-210.tampabay.res.rr.com [72.185.60.210]) by mx.google.com with ESMTPS id 34sm2198521yxl.30.2009.01.29.05.17.14 (version=TLSv1/SSLv3 cipher=RC4-MD5); Thu, 29 Jan 2009 05:17:15 -0800 (PST) Message-ID: <4981ABD4.4080107@gmail.com> Date: Thu, 29 Jan 2009 08:15:00 -0500 From: Saphirus Sage User-Agent: Thunderbird 2.0.0.19 (X11/20081231) Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Re: wlan0 promiscuous mode References: <49bf44f10901280900p33914cbci19ed49544757ee31@mail.gmail.com> <20090128171718.4D7B.1.NOFFLE@turbacz.local> <20090128204629.0ea80ad2.nexenta@evil-monkey-in-my-closet.com> <49bf44f10901282123w6d5af17bp41626a2ec01922a3@mail.gmail.com> <20090129134634.9bdeee2e.nexenta@evil-monkey-in-my-closet.com> In-Reply-To: <20090129134634.9bdeee2e.nexenta@evil-monkey-in-my-closet.com> Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Archives-Salt: 14aaa7fc-0964-4362-b832-0e274d587dc7 X-Archives-Hash: 844b73a4e379eb4ee8f19939d8f32b86 Dominic Kexel wrote: > On Wed, 28 Jan 2009 21:23:12 -0800 > Grant wrote: > > >>>>> Does anyone know how to put my USB wireless network adapter into >>>>> promiscuous mode so I can see everything that's happening wirelessley >>>>> on my network in wireshark? >>>>> >>>> ifconfig eth1 promisc >>>> >>>> But at least tcpdump puts the interface into promiscous mode >>>> automatically, so there is a chance that wireshark does the same. >>>> >>>> >>>> >>> Another way is to use airmon-ng from the aircrack-ng package: >>> >>> airmon-ng start wlan0 >>> >> I can't get that to work. I get: >> >> # airmon-ng start wlan0 >> Interface Chipset Driver >> wlan3 ath5k_pci - [phy0] >> wlan0 Ralink 2573 USB rt73usb - [phy1]/usr/sbin/airmon-ng: line 338: >> /sys/class/ieee80211/phy1/add_iface: No such file or directory >> mon0: ERROR while getting interface flags: No such device >> (monitor mode enabled on mon0) >> >> It looks like I'm supposed to have /sys/class/ieee80211/phy1/add_iface >> which isn't there. I've tried with net.wlan0 started and stopped. >> >> - Grant >> > > Your driver has to support monitor-mode. > I am using an Atheros-based internal WiFi-card and an Alpha-USB-WiFi-device > with Realtek-Chip. The drivers I used a while ago needed a patch to work with > monitor-mode, but the recent drivers don't. Take a look at the driver-section > on the aircrack-ng homepage. Maybe your driver needs to be patched. > > > I'm using the same chipset with the same driver (ath5_pci with phy0), and my card can go into monitor mode. I'm wondering if you are using the driver compiled into the kernel or madwifi-ng drivers.