On Thu, Jan 29, 2009 at 10:00 AM, Grant <[email protected]> wrote: >>>>>>> > Does anyone know how to put my USB wireless network adapter into >>>>>>> > promiscuous mode so I can see everything that's happening wirelessley >>>>>>> > on my network in wireshark? >>>>>>> >>>>>>> ifconfig eth1 promisc >>>>>>> >>>>>>> But at least tcpdump puts the interface into promiscous mode >>>>>>> automatically, so there is a chance that wireshark does the same. >>>>>>> >>>>>>> >>>>>> >>>>>> Another way is to use airmon-ng from the aircrack-ng package: >>>>>> >>>>>> airmon-ng start wlan0 >>>>> >>>>> Thanks everyone. I didn't realize it but monitor mode is what I'm >>>>> after. aircrack-ng looks interesting too. Is there something similar >>>>> with a GUI? airsnort seems to be discontinued. What is iw for? >>>> >>>> iw - show / manipulate wireless devices and their configuration >>>> >>>> Usage: iw [options] command >>>> Options: >>>> --debug enable netlink debugging >>>> --version show version >>>> Commands: >>>> help >>>> event >>>> list >>>> phy <phyname> info >>>> dev <devname> set channel <channel> [HT20|HT40+|HT40-] >>>> phy <phyname> set channel <channel> [HT20|HT40+|HT40-] >>>> dev <devname> set freq <freq> [HT20|HT40+|HT40-] >>>> phy <phyname> set freq <freq> [HT20|HT40+|HT40-] >>>> phy <phyname> set name <new name> >>>> dev <devname> set meshid <meshid> >>>> dev <devname> set monitor <flag> [...] >>>> dev <devname> info >>>> dev <devname> del >>>> dev <devname> interface add <name> type <type> [mesh_id >>>> <meshid>] [flags ...] >>>> phy <phyname> interface add <name> type <type> [mesh_id >>>> <meshid>] [flags ...] >>>> dev <devname> station dump >>>> dev <devname> station set <MAC address> plink_action <open|block> >>>> dev <devname> station del <MAC address> >>>> dev <devname> station get <MAC address> >>>> dev <devname> mpath dump >>>> dev <devname> mpath set <destination MAC address> next_hop >>>> <next hop MAC address> >>>> dev <devname> mpath new <destination MAC address> next_hop >>>> <next hop MAC address> >>>> dev <devname> mpath del <MAC address> >>>> dev <devname> mpath get <MAC address> >>>> reg set <ISO/IEC 3166-1 alpha2> >>>> dev <devname> get mesh_param <param> >>>> dev <devname> set mesh_param <param> <value> >>> >>> Are we talking about the same thing? >>> >>> iw: "nl80211 userspace tool for use with aircrack-ng" >>> >>> - Grant >> >> Yes, it was installed as a dep of aircrack-ng. >> >> Paul > > I've got aircrack-ng installed and I get: > > # emerge -pv iw > These are the packages that would be merged, in order: > Calculating dependencies... done! > !!! All ebuilds that could satisfy "net-wireless/iw" have been masked. > !!! One of the following masked packages is required to complete your request: > - net-wireless/iw-0.9.7 (masked by: ~amd64 keyword) > - net-wireless/iw-0_p20080605 (masked by: ~amd64 keyword) > > - Grant
I'm using ~amd64 and emerged net-wireless/aircrack-ng-1.0_rc1 which pulled in net-wireless/iw-0.9.7 as a dependency. Actually the aircrack-ng fails to build but that's irrelevant :)
