capture SSID of wifi network

powah · 08-31-2005, 09:38 AM

How to use ethereal or other open source packet sniffer to capture SSID of wifi network? What is the command line argument (instead of using GUI) to do that?
What capture or display filter should I use?

Wha?Where? · 08-31-2005, 12:10 PM

Have you tried this?
http://airsnort.shmoo.com

dracolich · 08-31-2005, 01:38 PM

Why use a packet sniffer just to get the SSID? Can you use 'iwlist wlan0 scan' ?

powah · 08-31-2005, 05:09 PM

My custom made hardware does not have wlan0.
# iwlist wlan0 scan
wlan0 Interface doesn't support scanning : No such device

# ifconfig
eth0 Link encap:Ethernet HWaddr 00:30:48:83:14:53
inet addr:172.31.1.100 Bcast:172.31.1.255 Mask:255.255.255.0
inet6 addr: fe80::230:48ff:fe83:1453/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:896507 errors:0 dropped:0 overruns:0 frame:0
TX packets:751607 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:179147137 (170.8 Mb) TX bytes:498988338 (475.8 Mb)
Base address:0xc000 Memory:f2000000-f2020000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:66568 errors:0 dropped:0 overruns:0 frame:0
TX packets:66568 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:12940562 (12.3 Mb) TX bytes:12940562 (12.3 Mb)

Quote:

Originally posted by dracolich
Why use a packet sniffer just to get the SSID? Can you use 'iwlist wlan0 scan' ?

Half_Elf · 08-31-2005, 07:24 PM

is "eth0" a wireless card? Then 'iwlist eth0 scan'. Otherwise, try 'iwlist XYZ scan', where XYZ is your wireless interface (assuming it is not show in your ifconfig output). You could use "iwconfig" to find the name of the wireless interface.

powah · 09-01-2005, 09:00 AM

# iwconfig
lo no wireless extensions.

sit0 no wireless extensions.

eth0 no wireless extensions.

eth1 no wireless extensions.

# ifconfig -a
eth0 Link encap:Ethernet HWaddr 00:30:48:83:14:53
inet addr:172.31.1.100 Bcast:172.31.1.255 Mask:255.255.255.0
inet6 addr: fe80::230:48ff:fe83:1453/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:1027858 errors:0 dropped:0 overruns:0 frame:0
TX packets:908024 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:198692206 (189.4 Mb) TX bytes:674441371 (643.1 Mb)
Base address:0xc000 Memory:f2000000-f2020000

eth1 Link encap:Ethernet HWaddr 00:30:48:83:E9:87
BROADCAST MULTICAST MTU:1500 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)
Base address:0xd100 Memory:f1000000-f1020000

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:76218 errors:0 dropped:0 overruns:0 frame:0
TX packets:76218 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:13805088 (13.1 Mb) TX bytes:13805088 (13.1 Mb)

sit0 Link encap:IPv6-in-IPv4
NOARP MTU:1480 Metric:1
RX packets:0 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:0 (0.0 b) TX bytes:0 (0.0 b)

Quote:

Originally posted by Half_Elf
is "eth0" a wireless card? Then 'iwlist eth0 scan'. Otherwise, try 'iwlist XYZ scan', where XYZ is your wireless interface (assuming it is not show in your ifconfig output). You could use "iwconfig" to find the name of the wireless interface.

powah · 09-01-2005, 03:23 PM

I hadn't tried airsnort.

Google give this:
www.kismetwireless.net

It seems useful to me.

Quote:

Originally posted by Wha?Where?
Have you tried this?
http://airsnort.shmoo.com

Half_Elf · 09-01-2005, 08:14 PM

I dont see any wireless card in what you shown us... are you sure your network card is installed and that the driver is loaded?