search

brannondorsey / sniff-probes

Plug-and-play bash script for sniffing 802.11 probes requests :nose:
MIT License
244 stars 43 forks source link

tcpdump: Unable to write output: Broken pipe + syntax errors? #4

Closed TheN00bBuilder closed 6 years ago

TheN00bBuilder commented 6 years ago

I've run into a slight problem... I get a bunch of errors while running this. Here's the log...

IFACE=wlan1mon ./sniff-probes.sh awk: parse-tcpdump.awk: line 2: syntax error at or near , awk: parse-tcpdump.awk: line 7: syntax error at or near , awk: parse-tcpdump.awk: line 13: syntax error at or near , tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on wlan1mon, link-type IEEE802_11_RADIO (802.11 plus radiotap header), capture size 256 bytes tcpdump: Unable to write output: Broken pipe

I'm using an Edimax EW-7811Un in monitor mode using updated drivers, but it will do the same thing with my Ralink RT5370 card on this Pi Zero W.

Any help?

brannondorsey commented 6 years ago

See https://github.com/brannondorsey/sniff-probes/issues/2. The problem is that this repo depends on the GNU version of awk, called gawk. Some distros symlink awk -> gawk while others do not. I'm going to update the project to explicitly state that gawk is needed :+1:

TheN00bBuilder commented 6 years ago

Can do. I'll go ahead and try it and report back. Thanks for the fast response!

TheN00bBuilder commented 6 years ago

Sure enough, it works great. Thanks Brannon!