From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LSaLZ-0005GI-1C for garchives@archives.gentoo.org; Thu, 29 Jan 2009 17:06:33 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id ACA3AE0400; Thu, 29 Jan 2009 17:06:31 +0000 (UTC) Received: from mu-out-0910.google.com (mu-out-0910.google.com [209.85.134.186]) by pigeon.gentoo.org (Postfix) with ESMTP id 478FCE0400 for ; Thu, 29 Jan 2009 17:06:31 +0000 (UTC) Received: by mu-out-0910.google.com with SMTP id i2so10613mue.6 for ; Thu, 29 Jan 2009 09:06:30 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:in-reply-to:references :date:message-id:subject:from:to:content-type :content-transfer-encoding; bh=RoBetRkFWoSyFqUnNSXmrVdEmhZp6r64G0t4WScF0bI=; b=bG7QJgKJXyZnnj3JfwK/VKRbhaPOgmLU5iCrpUCiVRRB8HAXuaJSY4tZFMeFFkaYwj tMLl/ldfQlXBdX090bdL+LzHrG0Xb7QPxD0+TrtIM7uyn13Z8mLd+8nmaQsQ1619quM6 BuYGU8wXxxehYvtyDUryVeLMloLyMy3tPqUnY= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type:content-transfer-encoding; b=ioI/6LcReSo/PdPS0Pmv31slFGId/83rhtHSlAT/ZPkIUdebI4A/B+935N9W8hAYXP WUdhKEhNv+6G3lG5lIuY+ar+LL6L/pWrvnRcRdDM6zYoZHSEbv2n+yPqReqNHdLPW1Uc vHoFwjHS6Mog3e7g53CMZAs/edsR47eQRuJ48= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.181.239.8 with SMTP id q8mr85626bkr.109.1233248790559; Thu, 29 Jan 2009 09:06:30 -0800 (PST) In-Reply-To: <58965d8a0901290806j4e09a388l8bc283439d914cc1@mail.gmail.com> References: <49bf44f10901280900p33914cbci19ed49544757ee31@mail.gmail.com> <20090128171718.4D7B.1.NOFFLE@turbacz.local> <20090128204629.0ea80ad2.nexenta@evil-monkey-in-my-closet.com> <49bf44f10901281217p12538284sf0be3011083cbb7b@mail.gmail.com> <58965d8a0901281408j1c96e353g7e4e1b2471a0c0ea@mail.gmail.com> <49bf44f10901281829q6fc608a2see76415d5976417a@mail.gmail.com> <58965d8a0901290733q60656131maa364f5aa04f9365@mail.gmail.com> <49bf44f10901290800x5b01e6b0x9a2792f6fd674664@mail.gmail.com> <58965d8a0901290806j4e09a388l8bc283439d914cc1@mail.gmail.com> Date: Thu, 29 Jan 2009 09:06:30 -0800 Message-ID: <49bf44f10901290906j2f530211j8f0a32c1c6e7e09a@mail.gmail.com> Subject: Re: [gentoo-user] Re: wlan0 promiscuous mode From: Grant To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Archives-Salt: 0f18158b-e320-45f0-991d-2ef5d32d051d X-Archives-Hash: 06f4ceb17f4f88c27bf1e80df341cb72 >>>>>>>> > Does anyone know how to put my USB wireless network adapter into >>>>>>>> > promiscuous mode so I can see everything that's happening wirelessley >>>>>>>> > on my network in wireshark? >>>>>>>> >>>>>>>> ifconfig eth1 promisc >>>>>>>> >>>>>>>> But at least tcpdump puts the interface into promiscous mode >>>>>>>> automatically, so there is a chance that wireshark does the same. >>>>>>>> >>>>>>>> >>>>>>> >>>>>>> Another way is to use airmon-ng from the aircrack-ng package: >>>>>>> >>>>>>> airmon-ng start wlan0 >>>>>> >>>>>> Thanks everyone. I didn't realize it but monitor mode is what I'm >>>>>> after. aircrack-ng looks interesting too. Is there something similar >>>>>> with a GUI? airsnort seems to be discontinued. What is iw for? >>>>> >>>>> iw - show / manipulate wireless devices and their configuration >>>>> >>>>> Usage: iw [options] command >>>>> Options: >>>>> --debug enable netlink debugging >>>>> --version show version >>>>> Commands: >>>>> help >>>>> event >>>>> list >>>>> phy info >>>>> dev set channel [HT20|HT40+|HT40-] >>>>> phy set channel [HT20|HT40+|HT40-] >>>>> dev set freq [HT20|HT40+|HT40-] >>>>> phy set freq [HT20|HT40+|HT40-] >>>>> phy set name >>>>> dev set meshid >>>>> dev set monitor [...] >>>>> dev info >>>>> dev del >>>>> dev interface add type [mesh_id >>>>> ] [flags ...] >>>>> phy interface add type [mesh_id >>>>> ] [flags ...] >>>>> dev station dump >>>>> dev station set plink_action >>>>> dev station del >>>>> dev station get >>>>> dev mpath dump >>>>> dev mpath set next_hop >>>>> >>>>> dev mpath new next_hop >>>>> >>>>> dev mpath del >>>>> dev mpath get >>>>> reg set >>>>> dev get mesh_param >>>>> dev set mesh_param >>>> >>>> Are we talking about the same thing? >>>> >>>> iw: "nl80211 userspace tool for use with aircrack-ng" >>>> >>>> - Grant >>> >>> Yes, it was installed as a dep of aircrack-ng. >>> >>> Paul >> >> I've got aircrack-ng installed and I get: >> >> # emerge -pv iw >> These are the packages that would be merged, in order: >> Calculating dependencies... done! >> !!! All ebuilds that could satisfy "net-wireless/iw" have been masked. >> !!! One of the following masked packages is required to complete your request: >> - net-wireless/iw-0.9.7 (masked by: ~amd64 keyword) >> - net-wireless/iw-0_p20080605 (masked by: ~amd64 keyword) >> >> - Grant > > I'm using ~amd64 and emerged net-wireless/aircrack-ng-1.0_rc1 which > pulled in net-wireless/iw-0.9.7 as a dependency. Actually the > aircrack-ng fails to build but that's irrelevant :) Got it, thank you. - Grant