Capture Packets with Monitor Mode
Once you've got the necessary patched drivers installed, the next step is to put the wireless card into monitor (also known as RFMON) mode so that it can capture packets without associating with any particular network.
The way to do this varies slightly from one driver to another, but for cards using Madwifi drivers the best way to do this is to become root and from a terminal session type: iwconfig
and then: airmon-ng stop ath0
(replacing ath0 with the name of the active wireless interface displayed by iwconfig)
and then: airmon-ng start wifi0
Issuing another iwconfig command should confirm a new interface - probably ath0 – has been placed in monitor mode.
Now, to scan for access points, type: airodump-ng ath0
This will show you any networks detected, the MAC addresses of the access points (BSSID), the MACs of any computers which are connected to them (STATION), and the wifi channels they are operating on. If the access point is broadcasting its name (ESSID), this will also be shown.
Once you've got the necessary patched drivers installed, the next step is to put the wireless card into monitor (also known as RFMON) mode so that it can capture packets without associating with any particular network.
The way to do this varies slightly from one driver to another, but for cards using Madwifi drivers the best way to do this is to become root and from a terminal session type: iwconfig
and then: airmon-ng stop ath0
(replacing ath0 with the name of the active wireless interface displayed by iwconfig)
and then: airmon-ng start wifi0
Issuing another iwconfig command should confirm a new interface - probably ath0 – has been placed in monitor mode.
Now, to scan for access points, type: airodump-ng ath0
This will show you any networks detected, the MAC addresses of the access points (BSSID), the MACs of any computers which are connected to them (STATION), and the wifi channels they are operating on. If the access point is broadcasting its name (ESSID), this will also be shown.