"Easy" question, Promiscuous or Monitor mode ?

I read about it, and I saw that promiscous listen all conversation after authetication with the ap,and monitor without any authentication. But for example I tried to do a test,I have my computer and my smarphone in the same ssid, and my wireshark show me that the wireless adapter is in promiscous, but I coldnt capture any traffic from my smartphone or to it... just some multicast conversation. Did I understood wrong ? and is possible do configure my adapter in monitor mode ? thanks a lot

See https://wiki.wireshark.org/CaptureSetup/WLAN#Promiscuous_mode for more details on 802.11 and promiscuous mode.

Assuming you are using some form of WPA encryption (WPA2 or WPA3, say, as you should be...) your adapter won't have the unicast keys from other hosts so can not decrypt the traffic anyway. However, typically, promiscuous mode has no effect on a WiFi adapter in terms of setting the feature on or off. There are wifi adapters with some drivers that support monitor mode but do not support promiscuous mode (no matter the setting) so never pass unicast traffic for other hosts up to be captured. Not particularly useful when trying to use an 802.11 over-the-air capture to troubleshoot.

is possible do configure my adapter in monitor mode

Some you can, some you can't. Without additional information, no one knows. The link has details for various operating systems. It's usually best not to be connected to an AP at the same time as trying to use monitor mode, so make sure your PC is disconnected from an AP and is just in monitor mode; the results can be unpredictable otherwise.

1.5k

Bob Jones

answered 2020-02-16 22:56:26 +0000

edit flag offensive 0 remove flag delete link

Comments

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

"Easy" question, Promiscuous or Monitor mode ? edit

Comments

1 Answer

Comments