From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from <gentoo-user+bounces-89919-garchives=archives.gentoo.org@lists.gentoo.org>) id 1LSZJw-00061n-TM for garchives@archives.gentoo.org; Thu, 29 Jan 2009 16:00:49 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id DF761E0327; Thu, 29 Jan 2009 16:00:47 +0000 (UTC) Received: from mu-out-0910.google.com (mu-out-0910.google.com [209.85.134.191]) by pigeon.gentoo.org (Postfix) with ESMTP id 722D1E0327 for <gentoo-user@lists.gentoo.org>; Thu, 29 Jan 2009 16:00:47 +0000 (UTC) Received: by mu-out-0910.google.com with SMTP id i2so6041284mue.6 for <gentoo-user@lists.gentoo.org>; Thu, 29 Jan 2009 08:00:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=5iBWq3qxq8gKbVM+2ud66Agoo1PTF4D/vnIsQu3REdQ=; b=BsOfltt4HEZmMIMw6AJ0CGx4GVGxsQhHcWVmr7nz78zB11MRPoIOMblwK8AYM1ng3C 2QrohW/4wi05z0rIRhcYs6B7n/fdoqFRIw7l7CqyJdgl07dBuFAH112fQrglhv0YoLu3 alsDAJ3y045qAO8LNE7YgJgZ3+ce5M3v+WxqE= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=TYBicaEbi2cWVf+za3mycUk0vcyy9bHQ3WOzw/BQXD7KnVbCtbPMTemu7vO8a2cg+q VAy3CY3GWoQn5RSNaPVFcjPjhcjIKjZzxxYroyexSx/iFaC2ZA2DZrf7CCLwycAE5C1k t7bjsVqyPIQYo0oS4ol70qREpSxsIww8s0K3k= Precedence: bulk List-Post: <mailto:gentoo-user@lists.gentoo.org> List-Help: <mailto:gentoo-user+help@lists.gentoo.org> List-Unsubscribe: <mailto:gentoo-user+unsubscribe@lists.gentoo.org> List-Subscribe: <mailto:gentoo-user+subscribe@lists.gentoo.org> List-Id: Gentoo Linux mail <gentoo-user.gentoo.org> X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.181.54.8 with SMTP id g8mr66491bkk.114.1233244846547; Thu, 29 Jan 2009 08:00:46 -0800 (PST) In-Reply-To: <58965d8a0901290733q60656131maa364f5aa04f9365@mail.gmail.com> References: <49bf44f10901280900p33914cbci19ed49544757ee31@mail.gmail.com> <20090128171718.4D7B.1.NOFFLE@turbacz.local> <20090128204629.0ea80ad2.nexenta@evil-monkey-in-my-closet.com> <49bf44f10901281217p12538284sf0be3011083cbb7b@mail.gmail.com> <58965d8a0901281408j1c96e353g7e4e1b2471a0c0ea@mail.gmail.com> <49bf44f10901281829q6fc608a2see76415d5976417a@mail.gmail.com> <58965d8a0901290733q60656131maa364f5aa04f9365@mail.gmail.com> Date: Thu, 29 Jan 2009 08:00:46 -0800 Message-ID: <49bf44f10901290800x5b01e6b0x9a2792f6fd674664@mail.gmail.com> Subject: Re: [gentoo-user] Re: wlan0 promiscuous mode From: Grant <emailgrant@gmail.com> To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Archives-Salt: afc68a0b-cac1-4ded-9bc1-37ca85f354fd X-Archives-Hash: d7e3adf5c65831bef9af26d2f89e6020 >>>>>> > Does anyone know how to put my USB wireless network adapter into >>>>>> > promiscuous mode so I can see everything that's happening wirelessley >>>>>> > on my network in wireshark? >>>>>> >>>>>> ifconfig eth1 promisc >>>>>> >>>>>> But at least tcpdump puts the interface into promiscous mode >>>>>> automatically, so there is a chance that wireshark does the same. >>>>>> >>>>>> >>>>> >>>>> Another way is to use airmon-ng from the aircrack-ng package: >>>>> >>>>> airmon-ng start wlan0 >>>> >>>> Thanks everyone. I didn't realize it but monitor mode is what I'm >>>> after. aircrack-ng looks interesting too. Is there something similar >>>> with a GUI? airsnort seems to be discontinued. What is iw for? >>> >>> iw - show / manipulate wireless devices and their configuration >>> >>> Usage: iw [options] command >>> Options: >>> --debug enable netlink debugging >>> --version show version >>> Commands: >>> help >>> event >>> list >>> phy <phyname> info >>> dev <devname> set channel <channel> [HT20|HT40+|HT40-] >>> phy <phyname> set channel <channel> [HT20|HT40+|HT40-] >>> dev <devname> set freq <freq> [HT20|HT40+|HT40-] >>> phy <phyname> set freq <freq> [HT20|HT40+|HT40-] >>> phy <phyname> set name <new name> >>> dev <devname> set meshid <meshid> >>> dev <devname> set monitor <flag> [...] >>> dev <devname> info >>> dev <devname> del >>> dev <devname> interface add <name> type <type> [mesh_id >>> <meshid>] [flags ...] >>> phy <phyname> interface add <name> type <type> [mesh_id >>> <meshid>] [flags ...] >>> dev <devname> station dump >>> dev <devname> station set <MAC address> plink_action <open|block> >>> dev <devname> station del <MAC address> >>> dev <devname> station get <MAC address> >>> dev <devname> mpath dump >>> dev <devname> mpath set <destination MAC address> next_hop >>> <next hop MAC address> >>> dev <devname> mpath new <destination MAC address> next_hop >>> <next hop MAC address> >>> dev <devname> mpath del <MAC address> >>> dev <devname> mpath get <MAC address> >>> reg set <ISO/IEC 3166-1 alpha2> >>> dev <devname> get mesh_param <param> >>> dev <devname> set mesh_param <param> <value> >> >> Are we talking about the same thing? >> >> iw: "nl80211 userspace tool for use with aircrack-ng" >> >> - Grant > > Yes, it was installed as a dep of aircrack-ng. > > Paul I've got aircrack-ng installed and I get: # emerge -pv iw These are the packages that would be merged, in order: Calculating dependencies... done! !!! All ebuilds that could satisfy "net-wireless/iw" have been masked. !!! One of the following masked packages is required to complete your request: - net-wireless/iw-0.9.7 (masked by: ~amd64 keyword) - net-wireless/iw-0_p20080605 (masked by: ~amd64 keyword) - Grant