Analysing/sniffing packets on my wireless LAN questions

R

Rikki

2[H]4U
Joined
Oct 8, 2000
Messages
2,302
Hey folks,

Just wondering if anyone can point me in the right direction on a way to sniff/inspect packets on my wireless LAN.

Eg: Run a program on my netbook that monitors wireless traffic and logs whats going in and out.

I've downloaded Wireshark and run it and it seems to be working but when I grab packet data and then on another laptop visit a website and do a search for the website name it doesnt show in the packet data.

Can someone shed some light on this for me as its all a bit unknown for me at present.

Many thanks,

R.
 
Wireshark would only be showing the packets going between you and your router/switch.
 
Seems to show traffic going between other ones as well, I can see the IP addresses for my PS3 and other laptop popping up?
 
Ah ok, might be wrong then. Only traffic I see on my wireshark is my own traffic and arps
 
Ill double check tonight but Im almost certain I saw the activity of other NICs listed, dont know if traffic was shown but Ill check.
 
Haha this sounds legit.

"Guys why can't I see all the traffic everyone is sending over my network?? It's mine I promise." Also ARPs are broadcast packets, so yes you will be able to see them.

I don't see a rules thread so I hope this isn't against the rules but you are going to want to make sure your wireless card is capable of going into monitor mode. I will let you research the rest.
 
Wireless is a hub domain, all packets are broadcast within the radio range.

You need to be able to put your wireless adapter in Promiscuous mode, which in my experience can not be done reliably in windows. Download a back-track live cd, and you will be golden.
 
DL'd the BT4 ISO and put it on a USB drive. Boots up but its CLI driven I take it? This is on a Dell Mini 9.
 
Rikki said:
DL'd the BT4 ISO and put it on a USB drive. Boots up but its CLI driven I take it? This is on a Dell Mini 9.
Click to expand...
Huh...hadn't seen this distro , although I've seen some of the programs included in it before. I'm going to toy with it a bit. I'm not sure on the CLI......screenies show a debian desktop, so either the usb is CLI, or maybe you just need to root login and launch the GUI?
 
archivalbackup said:
You need to be able to put your wireless adapter in Promiscuous mode, which in my experience can not be done reliably in windows. Download a back-track live cd, and you will be golden.
Click to expand...

Doesn't everyone keep a stack of old Cisco wireless cards just for that purpose?


(heh, I got ahold of two and guard them with my life :) )
 
Monkey34 said:
Huh...hadn't seen this distro , although I've seen some of the programs included in it before. I'm going to toy with it a bit. I'm not sure on the CLI......screenies show a debian desktop, so either the usb is CLI, or maybe you just need to root login and launch the GUI?
Click to expand...

When you boot the live usb stick, you will automatically be logged in as root at the command line.
 
From there how do load the program specific to capture the wireless data being transmitted and received? Thanks :)
 
on backtrack once your logged in you can issue the startx command and that puts you in kde.
 
You must log in or register to reply here.
Back
Top