How to use a sniffer?

Titanas25 · 05-03-2006, 09:43 AM

I want to capture the RTS/CTS , ACKs packets in my wireless network consisting of two stations and using prismGT card.
Lets say i want to use Ethereal for the capturing how can i do it?
How monitor mode is used?
Any help will be appreciated

farslayer · 05-03-2006, 01:44 PM

If ethereal is installed on one of the machines it should be as easy as firing up ethereal, and selecting the Interface to 'sniff' .

Depending on what you are looking for you may want to look at some tools that are more specific to wireless networking such as kismet.
http://www.l0t3k.org/security/tools/wireless/

and the Live distro Auditor has wireless tools as well..

Titanas25 · 05-10-2006, 04:43 AM

I have a station with prism GT working as an AP in master mode and from my laptop i have access to it via wireless. Do i have to put my AP to monitor mode and sniff its interface with my laptop?
When i am connected to the AP via my laptop and set it to Monitor mode everything freezes and i lose my connection why?

ed_po · 05-13-2006, 10:41 AM

Quote:

Originally Posted by Titanas25

I have a station with prism GT working as an AP in master mode and from my laptop i have access to it via wireless. Do i have to put my AP to monitor mode and sniff its interface with my laptop?
When i am connected to the AP via my laptop and set it to Monitor mode everything freezes and i lose my connection why?

I think you have to leave your station at master mode(AP mode)
Your laptop wifi card must be rfmon capable one, and you should put it in monitor mode (rfmon) in order to capture layer 2 traffic. Then it will show you your RTS/CTS stuff, and may be your sniffer also need some RTS/CTS support to show it...