Hi Olivier,
On 02/11/2014 05:33 PM, Olivier Marce wrote:
Hi guys
thanks a lot for this splendid toolkit.
I got a strange (for me) behavior that I would like to share with you.
Platform Ubuntu 12.10
I have a WiFi interface named wlan5 and IP@ 192.168.1.5 that I ping from
another machine. MAC@ of this interface is 60:67:20:b0:b5:48
I setup a monitor virtual interface mon5 (iw dev wlan5 interface mon5 mode
monitor)
Then, I do not have the same results with netsniff-ng (0.5.8-rc5) and tshark
1.8.2 :
# netsniff-ng --in wlan5 -f "ether dst 60:67:20:b0:b5:48"
Would it work for you to use something like ...
# netsniff-ng --in wlan5 --rfraw -f "ether dst 60:67:20:b0:b5:48"
?
Usually --rfraw would be the option to enable monitor mode.
Running! Hang up with ^C!
< wlan5 98 1392136256s.25182523ns
[ Eth MAC (b8:a3:86:96:a5:0d => 60:67:20:b0:b5:48), Proto (0x0800, IPv
[snip]
but :
# netsniff-ng --in mon5 -f "ether dst 60:67:20:b0:b5:48"
Running! Hang up with ^C!
(... nothing...)
while :
# tshark -i mon5 -f "ether dst 60:67:20:b0:b5:48"
Capturing on mon5
0.000000 192.168.1.1 -> 192.168.1.5 ICMP 134 Echo (ping) request
id=0x0b7c, seq=838/17923, ttl=64
Is there a reason why netsniff-ng does not capture packet on monitor virtual
interface ?
Best regards
Thanks,
Daniel
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.
