LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Virtualization and Cloud (https://www.linuxquestions.org/questions/linux-virtualization-and-cloud-90/)
-   -   problem with aircrack-ng (https://www.linuxquestions.org/questions/linux-virtualization-and-cloud-90/problem-with-aircrack-ng-894749/)

jacopo9214 08-01-2011 05:53 AM

i've installed ubuntu in my notebook... when i type airmon-ng i found wlan0 etc. but then i have to type airodump-ng wlan0 and this is what i find:


Interface Chipset Driver

wlan0 Atheros ath9k - [phy0]
(monitor mode enabled on mon0)

root@ubuntu:/home/jac# airodump-ng wlan0
ioctl(SIOCSIWMODE) failed: Device or resource busy

ARP linktype is set to 1 (Ethernet) - expected ARPHRD_IEEE80211,
ARPHRD_IEEE80211_FULL or ARPHRD_IEEE80211_PRISM instead. Make
sure RFMON is enabled: run 'airmon-ng start wlan0 <#>'
Sysfs injection support was not found either.

so what can i do?

TobiSGD 08-01-2011 06:05 AM

Did you try it with the command the error-message suggested?

jacopo9214 08-01-2011 06:22 AM

you mean typing 'airmon-ng start wlan0 <#>'?

TobiSGD 08-01-2011 06:33 AM

Exactly.

jacopo9214 08-01-2011 06:43 AM

if i type airmon-ng start wlan0 <#> the terminal says that there is a sintax error symbol <new line>

if i type airmon-ng start wlan0 i've:


Found 4 processes that could cause trouble.
If airodump-ng, aireplay-ng or airtun-ng stops working after
a short period of time, you may want to kill (some of) them!

PID Name
830 avahi-daemon
831 NetworkManager
832 avahi-daemon
1093 wpa_supplicant


Interface Chipset Driver

wlan0 Atheros ath9k - [phy0]
(monitor mode enabled on mon0)


what does it mean?

TobiSGD 08-01-2011 06:52 AM

So, the first error-message
Quote:

Device or resource busy
stated that the device is already in use and therefore can't be used by the program you started.
The output of the second command
Quote:

Found 4 processes that could cause trouble.
If airodump-ng, aireplay-ng or airtun-ng stops working after
a short period of time, you may want to kill (some of) them!

PID Name
830 avahi-daemon
831 NetworkManager
832 avahi-daemon
1093 wpa_supplicant
shows you which programs could it be that are currently using the wireless device, so that you can try to kill them and see if it works after that. Since i don't have any knowledge how penetration testing works I am not able to say which one it may be.

corp769 08-01-2011 09:19 AM

Quote:

Originally Posted by jacopo9214 (Post 4430572)
if i type airmon-ng start wlan0 <#> the terminal says that there is a sintax error symbol <new line>

if i type airmon-ng start wlan0 i've:


Found 4 processes that could cause trouble.
If airodump-ng, aireplay-ng or airtun-ng stops working after
a short period of time, you may want to kill (some of) them!

PID Name
830 avahi-daemon
831 NetworkManager
832 avahi-daemon
1093 wpa_supplicant


Interface Chipset Driver

wlan0 Atheros ath9k - [phy0]
(monitor mode enabled on mon0)


what does it mean?

Sorry to sound like a dick, but the <#> symbolizes the channel number that you want to perform your actions upon. So instead of what you typed in, you would type in the following:
Code:

airmon-ng start wlan0 6
This will start it on channel 6. I highly suggest that you use google and learn about network devices, wireless devices, and how many channels per US specifications you have to work with.

Now second of all, take a look at the following output:
Code:

Sysfs injection support was not found either.
So even though the output from airmon-ng told you that monitor mode is possible to enable, that has nothing to do with injection because it is separate from the physical device wlan0, and mon0 is the virtual device being created. With your wireless device on, can you post the output of lsmod for us?

Cheers,

Josh

Tinkster 08-01-2011 12:29 PM

Closed for now as the OP chose to ignore my question.
jacopo9214, please contact me via e-Mail w/ an answer
to my question in thread if you want this re-opened.

Tinkster 08-02-2011 09:08 PM

The OP has assured me this for purely educational purposes,
and for use with his own WiFi router. Re-opened.

Jacopo, for future reference: if a mod asks you about
clarification, or to comply with his requests I recommend
doing so in a timely manner. Makes life easier and so
much more pleasant.

jacopo9214 08-03-2011 12:10 PM

sorry for misunderstanding, i will be better in future.

so my problem now is this: first of all, using airodump-ng wlan0 i get this message:
ARP linktype is set to 1 (Ethernet) - expected ARPHRD_IEEE802w11,
ARPHRD_IEEE80211_FULL or ARPHRD_IEEE80211_PRISM instead. Make
sure RFMON is enabled: run 'airmon-ng start wlan0 <#>'
Sysfs injection support was not found either.

if i use airodump-ng mon0 i can go on...

but when i type aireplay-ng -0 15 -a 02:26:5A:E1:22:8A -c 03:26:5A:E1:22:8A mon0
i get this message:
mon0 is on channel -1, but the AP uses channel 1


someone can help me?

corp769 08-03-2011 03:15 PM

Ahhh, THAT bug. Read my one blog about how I got my Alfa device working, it will definitely help. You need to patch chan.c if using compat-wireless, which I do recommend since you are having this problem.

Cheers,

Josh

jacopo9214 08-03-2011 05:44 PM

sorry,i'm not expert in this site.. can you post me te link of your blog please? thank you very much

corp769 08-04-2011 10:50 AM

You see my LQ handle off to the left? Click on it, then click on "View Blog."

jacopo9214 08-04-2011 02:13 PM

thanks i'll have a look!

corp769 08-04-2011 05:49 PM

No problem. Just note that you may have to manually patch chan.c; If you feel the need, I can create a new patch file. Read the updated text within my blog and write me a comment if you think I should, as it is kind of like a poll :p


All times are GMT -5. The time now is 07:54 AM.