Re: [gentoo-user] Re: wlan0 promiscuous mode

[Paul Hartman <paul.hartman+gentoo@gmail.com>]

On Thu, Jan 29, 2009 at 10:00 AM, Grant <emailgrant@gmail.com> wrote:
>>>>>>> > Does anyone know how to put my USB wireless network adapter into
>>>>>>> > promiscuous mode so I can see everything that's happening wirelessley
>>>>>>> > on my network in wireshark?
>>>>>>>
>>>>>>> ifconfig eth1 promisc
>>>>>>>
>>>>>>> But at least tcpdump puts the interface into promiscous mode
>>>>>>> automatically, so there is a chance that wireshark does the same.
>>>>>>>
>>>>>>>
>>>>>>
>>>>>> Another way is to use airmon-ng from the aircrack-ng package:
>>>>>>
>>>>>> airmon-ng start wlan0
>>>>>
>>>>> Thanks everyone.  I didn't realize it but monitor mode is what I'm
>>>>> after.  aircrack-ng looks interesting too.  Is there something similar
>>>>> with a GUI?  airsnort seems to be discontinued.  What is iw for?
>>>>
>>>> iw - show / manipulate wireless devices and their configuration
>>>>
>>>> Usage:  iw [options] command
>>>> Options:
>>>>        --debug         enable netlink debugging
>>>>        --version       show version
>>>> Commands:
>>>>        help
>>>>        event
>>>>        list
>>>>        phy <phyname> info
>>>>        dev <devname> set channel <channel> [HT20|HT40+|HT40-]
>>>>        phy <phyname> set channel <channel> [HT20|HT40+|HT40-]
>>>>        dev <devname> set freq <freq> [HT20|HT40+|HT40-]
>>>>        phy <phyname> set freq <freq> [HT20|HT40+|HT40-]
>>>>        phy <phyname> set name <new name>
>>>>        dev <devname> set meshid <meshid>
>>>>        dev <devname> set monitor <flag> [...]
>>>>        dev <devname> info
>>>>        dev <devname> del
>>>>        dev <devname> interface add <name> type <type> [mesh_id
>>>> <meshid>] [flags ...]
>>>>        phy <phyname> interface add <name> type <type> [mesh_id
>>>> <meshid>] [flags ...]
>>>>        dev <devname> station dump
>>>>        dev <devname> station set <MAC address> plink_action <open|block>
>>>>        dev <devname> station del <MAC address>
>>>>        dev <devname> station get <MAC address>
>>>>        dev <devname> mpath dump
>>>>        dev <devname> mpath set <destination MAC address> next_hop
>>>> <next hop MAC address>
>>>>        dev <devname> mpath new <destination MAC address> next_hop
>>>> <next hop MAC address>
>>>>        dev <devname> mpath del <MAC address>
>>>>        dev <devname> mpath get <MAC address>
>>>>        reg set <ISO/IEC 3166-1 alpha2>
>>>>        dev <devname> get mesh_param <param>
>>>>        dev <devname> set mesh_param <param> <value>
>>>
>>> Are we talking about the same thing?
>>>
>>> iw: "nl80211 userspace tool for use with aircrack-ng"
>>>
>>> - Grant
>>
>> Yes, it was installed as a dep of aircrack-ng.
>>
>> Paul
>
> I've got aircrack-ng installed and I get:
>
> # emerge -pv iw
> These are the packages that would be merged, in order:
> Calculating dependencies... done!
> !!! All ebuilds that could satisfy "net-wireless/iw" have been masked.
> !!! One of the following masked packages is required to complete your request:
> - net-wireless/iw-0.9.7 (masked by: ~amd64 keyword)
> - net-wireless/iw-0_p20080605 (masked by: ~amd64 keyword)
>
> - Grant

I'm using ~amd64 and emerged net-wireless/aircrack-ng-1.0_rc1 which
pulled in net-wireless/iw-0.9.7 as a dependency. Actually the
aircrack-ng fails to build but that's irrelevant :)