Grant wrote:
>>>>>>>> Does anyone know how to put my USB wireless network adapter into
>>>>>>>> promiscuous mode so I can see everything that's happening wirelessley
>>>>>>>> on my network in wireshark?
>>>>>>>>
>>>>>>> ifconfig eth1 promisc
>>>>>>>
>>>>>>> But at least tcpdump puts the interface into promiscous mode
>>>>>>> automatically, so there is a chance that wireshark does the same.
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>> Another way is to use airmon-ng from the aircrack-ng package:
>>>>>>
>>>>>> airmon-ng start wlan0
>>>>>>
>>>>> Thanks everyone. I didn't realize it but monitor mode is what I'm
>>>>> after. aircrack-ng looks interesting too. Is there something similar
>>>>> with a GUI? airsnort seems to be discontinued. What is iw for?
>>>>>
>>>> iw - show / manipulate wireless devices and their configuration
>>>>
>>>> Usage: iw [options] command
>>>> Options:
>>>> --debug enable netlink debugging
>>>> --version show version
>>>> Commands:
>>>> help
>>>> event
>>>> list
>>>> phy <phyname> info
>>>> dev <devname> set channel <channel> [HT20|HT40+|HT40-]
>>>> phy <phyname> set channel <channel> [HT20|HT40+|HT40-]
>>>> dev <devname> set freq <freq> [HT20|HT40+|HT40-]
>>>> phy <phyname> set freq <freq> [HT20|HT40+|HT40-]
>>>> phy <phyname> set name <new name>
>>>> dev <devname> set meshid <meshid>
>>>> dev <devname> set monitor <flag> [...]
>>>> dev <devname> info
>>>> dev <devname> del
>>>> dev <devname> interface add <name> type <type> [mesh_id
>>>> <meshid>] [flags ...]
>>>> phy <phyname> interface add <name> type <type> [mesh_id
>>>> <meshid>] [flags ...]
>>>> dev <devname> station dump
>>>> dev <devname> station set <MAC address> plink_action <open|block>
>>>> dev <devname> station del <MAC address>
>>>> dev <devname> station get <MAC address>
>>>> dev <devname> mpath dump
>>>> dev <devname> mpath set <destination MAC address> next_hop
>>>> <next hop MAC address>
>>>> dev <devname> mpath new <destination MAC address> next_hop
>>>> <next hop MAC address>
>>>> dev <devname> mpath del <MAC address>
>>>> dev <devname> mpath get <MAC address>
>>>> reg set <ISO/IEC 3166-1 alpha2>
>>>> dev <devname> get mesh_param <param>
>>>> dev <devname> set mesh_param <param> <value>
>>>>
>>> Are we talking about the same thing?
>>>
>>> iw: "nl80211 userspace tool for use with aircrack-ng"
>>>
>>> - Grant
>>>
>> Yes, it was installed as a dep of aircrack-ng.
>>
>> Paul
>>
>
> I've got aircrack-ng installed and I get:
>
> # emerge -pv iw
> These are the packages that would be merged, in order:
> Calculating dependencies... done!
> !!! All ebuilds that could satisfy "net-wireless/iw" have been masked.
> !!! One of the following masked packages is required to complete your request:
> - net-wireless/iw-0.9.7 (masked by: ~amd64 keyword)
> - net-wireless/iw-0_p20080605 (masked by: ~amd64 keyword)
>
> - Grant
>
>
Just unmask it in /usr/portage/profiles/pakage.unmask. Add the line
"net-wireless/iw ~amd64"