Open ghost opened 7 years ago
@gutsle Something similar happend with me, while my card says "monitor" is available, and I can run tshark, I get no output from tshark. I would try that as a method to see if really supports monitor mode.
That is:
tshark -I -i wlan0 -a duration:15 -w /tmp/tshark-temp
tshark -r /tmp/tshark-temp -T fields -e wlan.sa -e wlan.bssid
That output will not be empty if your card really supports monitor mode. Also change wlan0
to your interface.
The output is empty but the file has 2.4 K. I'm not sure how to interpret that.
@gutsle @schollz
I have the same issue - with a TN722N plugged into my Raspberry Pi Zero.
I have three adapters visible in 'howmanypeoplearearound':
I confirmed in iwconfig
that:
When I scan with wlan1 for 300 seconds - with an Apple iPhone SE several feet away searching for Wireless Networks - I get the result:
"Found no signals, are you sure wlan1 supports monitor mode?"
When I execute:
tshark -I -i wlan0 -a duration:15 -w /tmp/shark-temp
The result is:
"Capturing on 'wlan1' tshark: The capture session could not be initiated on interface 'waln1' (That device doesn't support monitor mode)."
When I execute:
iw list
The result is:
Wiphy phy1 ... Supported interface modes:
What should I troubleshoot/configure next? It seems howmanypeoplearearound and the recommended wifi adapter supporting monitor mode are configured properly.
PRIOR TO THIS BLOCK, I struggled to install the drivers on Raspbian for my TN722N...
An easy way to install your wifi adapter drivers is to use MrEngMan's install-wifi script which determines the wifi adapter you use and the kernel version you have and then should automatically download and install the right version of the driver - especially for most Realtek drivers. You can download and install the script using the following commands:
sudo wget http://fars-robotics.net/install-wifi -O /usr/bin/install-wifi
sudo chmod +x /usr/bin/install-wifi
sudo install-wifi
via https://www.raspberrypi.org/forums/viewtopic.php?f=46&t=178205
@gutsle Can you share your output from Wireshark?
I'm going to review my specific failure with Wireshark further. That seems to be the root of the issue.
@gutsle @schollz
I'm still stuck on Wireshark - combing those forums.
My primary error is:
mode: Host name lookup failure
when I run the command:
'sudo ifconfig wlan1 mode monitor'
Thoughts on why that is happening?
@adamsiem When did you buy your TN722N? The newer ones don't appear to support monitor mode :(
@adamsiem your Pi Zero has onboard wifi? Is the Pi Zero W right? Try this image https://whitedome.com.au/re4son/re4son-kernel/
It has nexmon patch, so you don't need the wifi dongle, you can use the onboard wifi in monitor mode on RPI3/RPI Zero W. Steps:
nexutil -m2
nexutil -m0
I have this image in my RPI 3 and it works like a charm with howmanypeoplearearound (I couldn't manage to install docker thought).
Hope this info is helpful!
Noticing the same behavior with recently acquired t722. Was able to install aircrack-ng suite and run airmon-ng and it enabled wlan0mon on the t722.
Even when that was active, I tried howmanypeoplearearound (with and without sudo), stopped airmon but the mon interface was still up and showed as busy.
Seems like the adapter is fine but there's something up with howmanypeoplearearound forcing it into monitor mode correctly?
I'd prefer not to go with custom images or reflashing to kali :/
(RP3 with all drivers, packages up to date, and upgrades applied)
@gutsle You need to first create the monitor mode interface with
$ iw phy wlan0 interface add mon1 type monitor
and then actually turn it on with:
$ ifconfig mon1 up
$ iw phy wlan0 interface add mon1 type monitor
I get
command failed: No such file or directory (-2)
I've tried this with two machines now and I cannot find any devices with either. Is there some way to check if the wifi devices support monitor mode?
I already did this: From iw phy: [...] Supported interface modes:
So, something more than just the output of iw would be good.