Re: [gentoo-user] Re: wlan0 promiscuous mode

[Grant]

>>>>>> Does anyone know how to put my USB wireless network adapter into
>>>>>> promiscuous mode so I can see everything that's happening wirelessley
>>>>>> on my network in wireshark?
>>>>>>
>>>>> ifconfig eth1 promisc
>>>>>
>>>>> But at least tcpdump puts the interface into promiscous mode
>>>>> automatically, so there is a chance that wireshark does the same.
>>>>>
>>>>>
>>>>>
>>>> Another way is to use airmon-ng from the aircrack-ng package:
>>>>
>>>> airmon-ng start wlan0
>>>>
>>> I can't get that to work.  I get:
>>>
>>> # airmon-ng start wlan0
>>> Interface    Chipset         Driver
>>> wlan3                        ath5k_pci - [phy0]
>>> wlan0                Ralink 2573 USB rt73usb - [phy1]/usr/sbin/airmon-ng: line 338:
>>> /sys/class/ieee80211/phy1/add_iface: No such file or directory
>>> mon0: ERROR while getting interface flags: No such device
>>> (monitor mode enabled on mon0)
>>>
>>> It looks like I'm supposed to have /sys/class/ieee80211/phy1/add_iface
>>> which isn't there.  I've tried with net.wlan0 started and stopped.
>>>
>>> - Grant
>>>
>>
>> Your driver has to support monitor-mode.
>> I am using an Atheros-based internal WiFi-card and an Alpha-USB-WiFi-device
>> with Realtek-Chip. The drivers I used a while ago needed a patch to work with
>> monitor-mode, but the recent drivers don't. Take a look at the driver-section
>> on the aircrack-ng homepage. Maybe your driver needs to be patched.
>>
>>
>>
> I'm using the same chipset with the same driver (ath5_pci with phy0),
> and my card can go into monitor mode. I'm wondering if you are using the
> driver compiled into the kernel or madwifi-ng drivers.

Are you using AR2425?  dmesg tells me:

ath5k_pci 0000:04:00.0: enabling device (0000 -> 0002)
ath5k_pci 0000:04:00.0: registered as 'phy0'
ath5k phy0: Support for RF2425 is under development.
ath5k phy0: Atheros AR2425 chip found (MAC: 0xe2, PHY: 0x70)

but I can't get it to work yet.  Not sure what's happening after
"Backgrounding".

- Grant