Re: [gentoo-user] Re: wlan0 promiscuous mode

[Grant <emailgrant@gmail.com>]

>>>>>>>> > Does anyone know how to put my USB wireless network adapter into
>>>>>>>> > promiscuous mode so I can see everything that's happening wirelessley
>>>>>>>> > on my network in wireshark?
>>>>>>>>
>>>>>>>> ifconfig eth1 promisc
>>>>>>>>
>>>>>>>> But at least tcpdump puts the interface into promiscous mode
>>>>>>>> automatically, so there is a chance that wireshark does the same.
>>>>>>>>
>>>>>>>>
>>>>>>>
>>>>>>> Another way is to use airmon-ng from the aircrack-ng package:
>>>>>>>
>>>>>>> airmon-ng start wlan0
>>>>>>
>>>>>> Thanks everyone.  I didn't realize it but monitor mode is what I'm
>>>>>> after.  aircrack-ng looks interesting too.  Is there something similar
>>>>>> with a GUI?  airsnort seems to be discontinued.  What is iw for?
>>>>>
>>>>> iw - show / manipulate wireless devices and their configuration
>>>>>
>>>>> Usage:  iw [options] command
>>>>> Options:
>>>>>        --debug         enable netlink debugging
>>>>>        --version       show version
>>>>> Commands:
>>>>>        help
>>>>>        event
>>>>>        list
>>>>>        phy <phyname> info
>>>>>        dev <devname> set channel <channel> [HT20|HT40+|HT40-]
>>>>>        phy <phyname> set channel <channel> [HT20|HT40+|HT40-]
>>>>>        dev <devname> set freq <freq> [HT20|HT40+|HT40-]
>>>>>        phy <phyname> set freq <freq> [HT20|HT40+|HT40-]
>>>>>        phy <phyname> set name <new name>
>>>>>        dev <devname> set meshid <meshid>
>>>>>        dev <devname> set monitor <flag> [...]
>>>>>        dev <devname> info
>>>>>        dev <devname> del
>>>>>        dev <devname> interface add <name> type <type> [mesh_id
>>>>> <meshid>] [flags ...]
>>>>>        phy <phyname> interface add <name> type <type> [mesh_id
>>>>> <meshid>] [flags ...]
>>>>>        dev <devname> station dump
>>>>>        dev <devname> station set <MAC address> plink_action <open|block>
>>>>>        dev <devname> station del <MAC address>
>>>>>        dev <devname> station get <MAC address>
>>>>>        dev <devname> mpath dump
>>>>>        dev <devname> mpath set <destination MAC address> next_hop
>>>>> <next hop MAC address>
>>>>>        dev <devname> mpath new <destination MAC address> next_hop
>>>>> <next hop MAC address>
>>>>>        dev <devname> mpath del <MAC address>
>>>>>        dev <devname> mpath get <MAC address>
>>>>>        reg set <ISO/IEC 3166-1 alpha2>
>>>>>        dev <devname> get mesh_param <param>
>>>>>        dev <devname> set mesh_param <param> <value>
>>>>
>>>> Are we talking about the same thing?
>>>>
>>>> iw: "nl80211 userspace tool for use with aircrack-ng"
>>>>
>>>> - Grant
>>>
>>> Yes, it was installed as a dep of aircrack-ng.
>>>
>>> Paul
>>
>> I've got aircrack-ng installed and I get:
>>
>> # emerge -pv iw
>> These are the packages that would be merged, in order:
>> Calculating dependencies... done!
>> !!! All ebuilds that could satisfy "net-wireless/iw" have been masked.
>> !!! One of the following masked packages is required to complete your request:
>> - net-wireless/iw-0.9.7 (masked by: ~amd64 keyword)
>> - net-wireless/iw-0_p20080605 (masked by: ~amd64 keyword)
>>
>> - Grant
>
> I'm using ~amd64 and emerged net-wireless/aircrack-ng-1.0_rc1 which
> pulled in net-wireless/iw-0.9.7 as a dependency. Actually the
> aircrack-ng fails to build but that's irrelevant :)

Got it, thank you.

- Grant