Orinoco Promisc mode under Win2k

Mindframe · 06-13-2002

Hello all,

I want to put my Orinoco Gold card into promiscuous mode under win2k.

I have read that the newer firmware 8.10 doesn't support this, but in the README for the 7.42 NDIS driver it says it supports promiscuous mode.

Firmware 6.04 supports promisc mode with Linux but I don't know if there is a similar setup for Win2k yet.

Also do any versions of libpcap for windows support raw mode to capture becon packets or 802.11 packets?

I would like to get my win2k laptop sniffing but I don't know how possible it is.

Thanks
Pat

blackwave · 06-13-2002

Quote:

Originally posted by Mindframe
I would like to get my win2k laptop sniffing but I don't know how possible it is.

With W2k, you should be in luck, there are plenty of threads that mention this, and which driver to use and where to get it... I have XP, and cannot get into this mode

... Though I have several OSes on my laptop my favorite is XP and I use that the most. Perhaps one of these days I will try to put the Ocard into p-mode.. but otherwise I have several prism cards, so I do not think I have too much to worry about.

lincomatic · 06-13-2002

i've run analyzer and ethereal under XP w/ 8.10 f/w and they work great. but this is more like sniffing a wired lan...you need to associate w/ the AP first.

sykojester · 06-13-2002

just to reitterate a point

promiscous mode (on wired or wireless lans) is a mode where the card accepts all packets (used for sniffing) and for wireless you have to be associated with the AP (you have to be on the damned thing)

"MONITOR" mode (as i've heard it called *for wireless*) is like a form of prom. mode accept you are NOT associated with the AP and picking up all packets being sent to the card (outta thin air).

to the best of my knowledge. prom. mode works just fine on all drivers/firmware of the orinoco cards although Monitor mode was disabled somewhere after version 6.x (i.e. 8.1x drivers dont work for this).

If I'm wrong, correct me.

lincomatic · 06-13-2002

Quote:

Originally posted by sykojester
just to reitterate a point

promiscous mode (on wired or wireless lans) is a mode where the card accepts all packets (used for sniffing) and for wireless you have to be associated with the AP (you have to be on the damned thing)

"MONITOR" mode (as i've heard it called *for wireless*) is like a form of prom. mode accept you are NOT associated with the AP and picking up all packets being sent to the card (outta thin air).

to the best of my knowledge. prom. mode works just fine on all drivers/firmware of the orinoco cards although Monitor mode was disabled somewhere after version 6.x (i.e. 8.1x drivers dont work for this).

If I'm wrong, correct me.

i agree w/ you on that. my comments were specifically about promiscuous mode, not monitor mode. a lot of comments flying about this forum have been about promiscuous mode not working but maybe the posters were really referring to monitor mode, which aparently does have problems in the later f/w. otherwise, the wireless sniffer vendors like wildpackets wouldn't ask you to downgrade your firmware.

blackwave · 06-13-2002

I think my laptop has a cold...

06-13-2002	#1 (permalink)
Mindframe Registered Member Join Date: May 2002 Location: Boston, MA Posts: 2	Orinoco Promisc mode under Win2k Hello all, I want to put my Orinoco Gold card into promiscuous mode under win2k. I have read that the newer firmware 8.10 doesn't support this, but in the README for the 7.42 NDIS driver it says it supports promiscuous mode. Firmware 6.04 supports promisc mode with Linux but I don't know if there is a similar setup for Win2k yet. Also do any versions of libpcap for windows support raw mode to capture becon packets or 802.11 packets? I would like to get my win2k laptop sniffing but I don't know how possible it is. Thanks Pat

06-13-2002	#3 (permalink)
lincomatic Squaaawk! WiFi! WiFi! Join Date: Apr 2002 Location: Tinsel Town Posts: 1,682	i've run analyzer and ethereal under XP w/ 8.10 f/w and they work great. but this is more like sniffing a wired lan...you need to associate w/ the AP first. __________________ ~lincomatic

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

06-13-2002	#4 (permalink)
sykojester Net Lurker - phjear Join Date: Apr 2002 Location: Tallahassee, FL Posts: 371	just to reitterate a point promiscous mode (on wired or wireless lans) is a mode where the card accepts all packets (used for sniffing) and for wireless you have to be associated with the AP (you have to be on the damned thing) "MONITOR" mode (as i've heard it called for wireless) is like a form of prom. mode accept you are NOT associated with the AP and picking up all packets being sent to the card (outta thin air). to the best of my knowledge. prom. mode works just fine on all drivers/firmware of the orinoco cards although Monitor mode was disabled somewhere after version 6.x (i.e. 8.1x drivers dont work for this). If I'm wrong, correct me.