LinuxQuestions.org
Visit Jeremy's Blog.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking > Linux - Wireless Networking
User Name
Password
Linux - Wireless Networking This forum is for the discussion of wireless networking in Linux.

Notices


Reply
  Search this Thread
Old 03-31-2005, 07:26 AM   #1
Ephracis
Senior Member
 
Registered: Sep 2004
Location: Sweden
Distribution: Ubuntu, Debian
Posts: 1,109

Rep: Reputation: 50
Sniffing packages (only get one way)


I am playing around with a wifi lan here. My friend (who is asleep) has a wifi card just as I do and we have a router here that we both connect to. So I started ethereal and started sniffing.

Then I went to his computer and logged in at my own account here at LQ, trying to sniff my own password. Then I saw that the only packages I got was the one sent TO his card, I did not get anything with his ip as the source.

My guess is that there is a big difference between an access point and a card, so my card does not get what he is sending, just what he is getting. Is this right and is there anyway that I can sniff things coming FROM him?
 
Old 03-31-2005, 10:14 AM   #2
Donboy
Member
 
Registered: Aug 2003
Location: Little Rock, Arkansas
Distribution: RH, Fedora, Suse, AIX
Posts: 736

Rep: Reputation: 31
The problem is your wireless card drivers. To my understanding, drivers supplied by wireless vendors dont support "monitor" mode, which is necessary to capture from wireless interfaces besides yours and the AP.

Try Kismet instead. Or you can get an Orinoco wireless card.

For some really excellent discussion about wireless networking, check out netstumbler.org.
 
Old 03-31-2005, 10:57 AM   #3
2Gnu
Senior Member
 
Registered: Jan 2002
Location: Southern California
Distribution: Slackware
Posts: 1,880

Rep: Reputation: 51
Kismet will not allow packet sniffing as described by the original poster.

An ORiNOCO card, in and of itself will not allow monitor mode. A driver patch or release candidate drivers are required for that (and for using Kismet). More detail is available on the Kismet-wireless site.

Ethereal must be run in promiscuous mode to see things in both directions. MezzyMeat, make sure you select that option when running it.
 
Old 03-31-2005, 02:35 PM   #4
Ephracis
Senior Member
 
Registered: Sep 2004
Location: Sweden
Distribution: Ubuntu, Debian
Posts: 1,109

Original Poster
Rep: Reputation: 50
Yeah, it worked when I manually put it into monitor mode before sniffing
Code:
$ iwconfig ath0 mode monitor
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
wireless sniffing guild Linux - Security 16 08-30-2005 11:29 AM
Sniffing Layer 1 rafita Linux - Wireless Networking 1 04-18-2005 03:08 AM
IP Sniffing, how? shrike_912 Slackware - Installation 1 06-06-2004 05:36 PM
sniffing a switch darthczyz Linux - Software 2 07-23-2003 05:33 PM
sniffing question Di0de Linux - Networking 2 07-02-2003 08:39 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Networking > Linux - Wireless Networking

All times are GMT -5. The time now is 07:03 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration