That should work with any wireless network adapter that has a driver that supports "Native WiFi" - you might have to ask the vendor of the adapter (or, if it's built into your machine, the vendor of your machine) whether the driver supports Native WiFi or not. You can capture in monitor mode on Vista and Windows 7 with, for example, Microsoft Network Monitor, as well as with some other network analyzers that cost money. All you can do on Windows is buy an AirPcap adapter and use that. The actual answer is that the OSes on which you can capture in monitor mode with tcpdump or Wireshark are Linux, *BSD, and Mac OS X, and that's it you cannot do so on Windows (or on Unixes such as Solaris). In either case, there are some Unixes that support monitor mode and that don't. "Unix" is a generic term it either means "any OS that looks like a Unix", which includes Linux and Solaris and BSD and Mac OS X and AIX and HP-UX and., or "any OS that's passed that validation suite so the 'Unix' trademark can be used with it", which includes Solaris and AIX and HP-UX and Mac OS X but not Linux or BSD. Is there a NIC that will allow me to get into monitor mode using Vista? If I add Linux to my PC am I assured of being able to get into monitor mode or will I still have to wait and see if my NIC supports it? Appreciate any help with this from the community. I'd really appreciate a clear explanation of what, if anything, I can do to be able to view my captures in monitor mode. I've read other posts that suggest that it is possible to get into monitor mode even if you are running Vista, as I am. I've read some other things online that suggest that even if you are running Linux your adapter must still be capable of being configured to accept monitor mode. I'm looking under "Capture" for an option under promiscuous mode but from the Wireshark User's Guide I see that this option may be available only if you are running Linux or Unix. I have to be in monitor mode to be able to view this traffic but I can't seem to be able to get there. I would like to know how I can get my device to see wifi networks to connect to when it's in this situation? If I can do that it should all work properly.I'm trying to view the RTS/CTS process that occurs when you lower the RTS threshold on a wireless router. So if I don't restart after enabling monitor mode and then go into wireshark- monitor mode is checked, but, the device does not see any wifi networks so is down and there's therefore no activity. But restarting the pc like this puts the device back into managed mode. I have noticed that if I enable Monitor mode in WlanHelper, then restart, the device sees all the wifi networks to connect to. I am assuming something is wrong here and I need to enable monitor mode in WlanHelper (which I've done), and enable monitor mode in Wireshark? If I double click the wifi interface in question it starts capturing, but I haven't seen any other traffic other than my own. When i go to Capture>Options, the checkbox under the Monitor Mode column does not allow me to check it. I went into Wireshark and on the home screen the wifi activity is shown. I have been able to enable my device to monitor mode via WlanHelper.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |