From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([69.77.167.62] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1LSYtw-00028R-Ud for garchives@archives.gentoo.org; Thu, 29 Jan 2009 15:33:57 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 9F13BE027D; Thu, 29 Jan 2009 15:33:54 +0000 (UTC) Received: from rn-out-0910.google.com (rn-out-0910.google.com [64.233.170.188]) by pigeon.gentoo.org (Postfix) with ESMTP id 6CAE9E027D for ; Thu, 29 Jan 2009 15:33:54 +0000 (UTC) Received: by rn-out-0910.google.com with SMTP id k1so3035227rnd.14 for ; Thu, 29 Jan 2009 07:33:54 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:sender:received:in-reply-to :references:date:x-google-sender-auth:message-id:subject:from:to :content-type:content-transfer-encoding; bh=Q4hR1xz/5QpDuCa/nej7qbDvrJWf7OZsdMH/BI8cxOQ=; b=h6nLXgf6Anp3IvIeFG2nSqdb9gv+rURReR7VnkTOwd0yi5w5Ac4+CYrLdBUsxMCmAD +8bSbyBSUyelPH3RgVtRS6SbZqWiZyAp5ys6BcKJLrnqsQtKFCn2+ZIiwhxqiz5j0S6i LpErWBb7QT4SLrAvwlpjxcsaDmRA51a5u9Tz8= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:sender:in-reply-to:references:date :x-google-sender-auth:message-id:subject:from:to:content-type :content-transfer-encoding; b=DoyX6K0vJMhG6XysOoEQe02glioVLtX6hKE1o3B7PsNic/1h3xFFEltWxEBhVH3eXr 9hD3Fbr4m19yJ0CG8ycNZCxLiGunFRtzrAmncBr9xRTMhg0z391spf+aMtM6/Oc0Zo+0 6Cdat9tcM5x5R2mV5nFTgPXr+HEROpVN3qd0E= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Sender: paul.hartman@gmail.com Received: by 10.150.138.1 with SMTP id l1mr195404ybd.241.1233243234078; Thu, 29 Jan 2009 07:33:54 -0800 (PST) In-Reply-To: <49bf44f10901281829q6fc608a2see76415d5976417a@mail.gmail.com> References: <49bf44f10901280900p33914cbci19ed49544757ee31@mail.gmail.com> <20090128171718.4D7B.1.NOFFLE@turbacz.local> <20090128204629.0ea80ad2.nexenta@evil-monkey-in-my-closet.com> <49bf44f10901281217p12538284sf0be3011083cbb7b@mail.gmail.com> <58965d8a0901281408j1c96e353g7e4e1b2471a0c0ea@mail.gmail.com> <49bf44f10901281829q6fc608a2see76415d5976417a@mail.gmail.com> Date: Thu, 29 Jan 2009 09:33:53 -0600 X-Google-Sender-Auth: 674bd81d85c9278d Message-ID: <58965d8a0901290733q60656131maa364f5aa04f9365@mail.gmail.com> Subject: Re: [gentoo-user] Re: wlan0 promiscuous mode From: Paul Hartman To: gentoo-user@lists.gentoo.org Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Archives-Salt: 512e2ad9-ac7c-44aa-8bf2-129a3d3a3ae8 X-Archives-Hash: 572ff4355064abe799e452dfd66651e3 On Wed, Jan 28, 2009 at 8:29 PM, Grant wrote: >>>>> > Does anyone know how to put my USB wireless network adapter into >>>>> > promiscuous mode so I can see everything that's happening wirelessley >>>>> > on my network in wireshark? >>>>> >>>>> ifconfig eth1 promisc >>>>> >>>>> But at least tcpdump puts the interface into promiscous mode >>>>> automatically, so there is a chance that wireshark does the same. >>>>> >>>>> >>>> >>>> Another way is to use airmon-ng from the aircrack-ng package: >>>> >>>> airmon-ng start wlan0 >>> >>> Thanks everyone. I didn't realize it but monitor mode is what I'm >>> after. aircrack-ng looks interesting too. Is there something similar >>> with a GUI? airsnort seems to be discontinued. What is iw for? >> >> iw - show / manipulate wireless devices and their configuration >> >> Usage: iw [options] command >> Options: >> --debug enable netlink debugging >> --version show version >> Commands: >> help >> event >> list >> phy info >> dev set channel [HT20|HT40+|HT40-] >> phy set channel [HT20|HT40+|HT40-] >> dev set freq [HT20|HT40+|HT40-] >> phy set freq [HT20|HT40+|HT40-] >> phy set name >> dev set meshid >> dev set monitor [...] >> dev info >> dev del >> dev interface add type [mesh_id >> ] [flags ...] >> phy interface add type [mesh_id >> ] [flags ...] >> dev station dump >> dev station set plink_action >> dev station del >> dev station get >> dev mpath dump >> dev mpath set next_hop >> >> dev mpath new next_hop >> >> dev mpath del >> dev mpath get >> reg set >> dev get mesh_param >> dev set mesh_param > > Are we talking about the same thing? > > iw: "nl80211 userspace tool for use with aircrack-ng" > > - Grant Yes, it was installed as a dep of aircrack-ng. Paul