We can also change the channel to which we want to listen to if the WirelessNIC supports it and it mostly does. We can passively listen for the whole traffic that is going on in the current channel in which the WirelessNIC is listening. We don’t need to be associated with an A.P to listen to packets. Monitor mode in short for Radio Frequency MONitor allows a Wireless NIC to monitor all traffic in the nearby wireless network. If we want to see the layer2 Wi-Fi packets then we need to put our Wi-Fi card in monitor mode. Along with managed, master, p2p-Go and p2p-client modes some Wi-Fi cards and its corresponding drivers support this mode too. What is needed to actually see the Layer2 Wi-Fi packets ? So it is well within the above capture time. ![]() ![]() Yes, it was transmitting beacons when i captured these packets and a few more access points were sending its beacons frames too.Normally i keep the beacon interval to 100 transmission units (TBTT) which equals to 102.4 ms. Isn’t the wireless router which am using to write this blog not broadcasting its SSID when i captured this ? Lets analyze the captured packets, it has few TCP and its ACK packets and few IPv6 packets. But it does not contain any Wi-Fi Management, Data, Control packets. Lets us capture a few packets coming out from my Wi-Fi card. ![]() The answer to the above question needs a little bit of explanation. Why write a blog like this when we can easily see the network packets through wireshark or tcpdump.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |