I'm not getting the needed packets wih Wireshark

Answer Best answer as chosen by user pahunrepublic

Router monitor

by bill012 - 5/31/12 5:37 AM

In Reply to: I'm not getting the needed packets wih Wireshark by pahunrepublic

Wireshark is hard to learn when you try to start on the most advanced form of captures as a first project.

Your key problem is the capture of the wireless packets not the wireshark.

Start the easy way and capture the packets directly on the notebook you are surfing facebook from. This will let you see what the capture is suppose to look like.

Most people start by capturing wired ports but you need a special switch/router for that. You can buy just about any old cisco/hp/3com commercial switch for less than $20 and they have features called mirror or monitor ports on them.

Capture of wireless is a huge challenge. Problem number 1 is you need a wireless card that has the ability to be put in promiscuous mode. Problem number 2 is you cannot run on windows other than 1 card, microsoft has disabled the ability to set the promiscuous option. Problem number 3 is you need special software to set all the parameters in the card like channel numbers and bands etc.

Since you already have ubuntu you could load all these tools but it is a pain. The easy way is to load the prebuilt system call BACKTRAK. This has all the common device drivers already installed. It has every tool you could ever want but the key ones are AIRMON-NG and of course wireshark.

I will leave it to you to read all the details.

Was this reply helpful? (1) (0)

Staff pick

Report offensive post

Email to friend

Permalink

I have bactrack 5 installed

by pahunrepublic - 6/1/12 8:09 AM

In Reply to: Router monitor by bill012

Thanx for the answer. I got BACKTRACK installed, yes it has many pretty tools but I have to learn those.

Was this reply helpful? (0) (0)

Staff pick

Report offensive post