Wireshark mailing list archives

Re: monitor mode


From: Guy Harris <guy () alum mit edu>
Date: Fri, 8 Mar 2013 10:57:55 -0800


On Mar 8, 2013, at 10:22 AM, bart sikkes <b.sikkes () gmail com> wrote:

it might be the case you don't have your interface in monitor mode.
you could try to set it as such: iwconfig wlan0 mode monitor

If you do that, it might fail; I tried it on Ubuntu 12.04 with a Zydas-based Belkin USB stick and it got

        Error for wireless request "Set Mode" (8B06) :
            SET failed on device wlan0 ; Device or resource busy.

I don't know if that's NetworkManager getting in the way or not.

or use another tool like airmon-ng [1] to do create a virtual interface in
monitoring mode.

airmon-ng is my recommendation in these cases.  It has a large bag of tricks for dealing with the twisty little maze of 
Wi-Fi drivers on Linux, many different (although I think mac80211 drivers would all be treated the same; airmon-ng 
handles that).

___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe


Current thread: