NetStumbler.org Forums

Go Back   NetStumbler.org Forums > WiFi Forums > Hardware
Reload this Page Ethereal
Register Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
Old 09-28-2002   #1 (permalink)
tentriX
Registered Member
 
tentriX's Avatar
 
Join Date: Jun 2002
Posts: 1
Ethereal
Ok, the $10k question. Has anyone gotten Ethereal to work with Windows in true wireless promiscuous mode (monitor)? Not associated with an AP and sniffing the traffic.

I read through Ethereal's site and it says that it pretty well won't work with Orinoco cards. I went to WinPCap and it indicated it was hit or miss.

I searched through the forums and saw the obvious choices of NA and Wild Packets. But for this question, I am looking for Ethereal info.

So, does anyone have any info on this? What combo of OS, card, firmware, drivers, etc has worked with Ethereal?

This is Windows only obviously.
tentriX is offline   Reply With Quote
Old 09-28-2002   #2 (permalink)
godsmoke
Student / Sys Admn.
 
godsmoke's Avatar
 
Join Date: Aug 2002
Location: NYC, USA
Posts: 78
Re: Ethereal
Quote:
Originally posted by tentriX
Ok, the $10k question. Has anyone gotten Ethereal to work with Windows in true wireless promiscuous mode (monitor)? Not associated with an AP and sniffing the traffic.

I read through Ethereal's site and it says that it pretty well won't work with Orinoco cards. I went to WinPCap and it indicated it was hit or miss.

I searched through the forums and saw the obvious choices of NA and Wild Packets. But for this question, I am looking for Ethereal info.

So, does anyone have any info on this? What combo of OS, card, firmware, drivers, etc has worked with Ethereal?

This is Windows only obviously.
OK, promiscuous mode is NOT the same as monitor mode ... very different. As for support requarding orinoco cards ... under linux it has worked fine, I can capture packets with the card in monitor mode. Monitor mode cannot be attained in windows ... so the card should work fine.
__________________
-godsmoke
godsmoke is offline   Reply With Quote
Old 09-28-2002   #3 (permalink)
Eyecannon
Ward River
 
Eyecannon's Avatar
 
Join Date: Aug 2002
Location: Santa Monix
Posts: 679
Re: Re: Ethereal
Quote:
Originally posted by godsmoke


OK, promiscuous mode is NOT the same as monitor mode ... very different. As for support requarding orinoco cards ... under linux it has worked fine, I can capture packets with the card in monitor mode. Monitor mode cannot be attained in windows ... so the card should work fine.
A little OT, but can you use a sniffer like Ethereal and Kismet at the same time? I tried the other night, but it just gave me these bizarre SLL packets from localhost.localdomain.
__________________
No, officer, YOU are under arrest!

http://eyecannon.com/wardrive.html
Eyecannon is offline   Reply With Quote
Old 09-29-2002   #4 (permalink)
JimmyPopAli
Registered Member
 
JimmyPopAli's Avatar
 
Join Date: Apr 2002
Location: Washington the state
Posts: 242
Re: Re: Re: Ethereal
Quote:
Originally posted by Eyecannon


A little OT, but can you use a sniffer like Ethereal and Kismet at the same time? I tried the other night, but it just gave me these bizarre SLL packets from localhost.localdomain.
It's easier to just run Kismet and have it create a dump file and then just load that into Ethereal afterwards.
JimmyPopAli is offline   Reply With Quote
Old 09-29-2002   #5 (permalink)
godsmoke
Student / Sys Admn.
 
godsmoke's Avatar
 
Join Date: Aug 2002
Location: NYC, USA
Posts: 78
Re: Re: Re: Ethereal
Quote:
Originally posted by Eyecannon
I tried the other night, but it just gave me these bizarre SLL packets from localhost.localdomain.
OK, you see, Kismet is not just a program ... it's atually two. One is a server and one is a client. So potentially you can run the server on one machine, and people on your network can run clients all pulling the same data from the server.

When you start Kismet, it starts a server and then connects to it ... thus those packets that you were getting were the Kismet packets traveling from your server to you client.

Yes, you should just open the .dump file that was created by Kismet in Ethereal to analyze the packets further.
__________________
-godsmoke
godsmoke is offline   Reply With Quote
Old 09-29-2002   #6 (permalink)
Eyecannon
Ward River
 
Eyecannon's Avatar
 
Join Date: Aug 2002
Location: Santa Monix
Posts: 679
haha DUH... thanks guys
__________________
No, officer, YOU are under arrest!

http://eyecannon.com/wardrive.html
Eyecannon is offline   Reply With Quote
Reply

« Questions about War Driving with a Powerbook G4 | Problems w/ eTrex in Australia »

Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Google
 
Web NetStumbler.org

All times are GMT -7. The time now is 07:32 PM.

Contact Us - NetStumbler.org - NetStumbler.com - Online Backup - Archive - Top

Powered by vBulletin® Version 3.6.8
Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0 ©2007, Crawlability, Inc.


All messages express the views of the author and are for entertainment purposes only. Netstumbler.org cannot be held responsible for the authenticity of the content or the actions of its members. By using this site and its services, you warrant that you will not post any messages that are discriminating, obscene, hateful, threatening, or otherwise violates any laws and you release Netstumbler.org from any future claims of any kind whatsoever including, but not limited to, addiction and loss of productivity. All forum messages, private messages and any other content are properties of Netstumbler.org. Even if publicly available, personal or copyrighted information are not to be posted without the consent of the owner. Distribution of licensed and copyrighted materials in any way not endorsed by the copyright owner is strictly prohibited. You may not use this site and its resources to spam other sites or individuals or perform any action that violates any law. Items sold or bought in the For Sale forum are sold as is and no warranty or insurance of any kind is provided. Netstumbler.org cannot be held responsible for the outcome of any transactions and no warranty of any kind is provided, either express or implied. Vulgar words are not allowed in the subject lines ; they may be used in the message body in any forum. The Administrator, Super Moderators and Moderators of Netstumbler.org have the right to remove, edit, move or close any thread for any reason and to reveal your identity and other known information in the event of a complaint or legal action arising from any message posted by you.