I get the error "unable to set channel or offset". I want to check permissions, but the directory .config/wireshark is empty. What do I have to do?
I'm running Linux 18.04 on virtual machine with Oracle VM. My purpose os to be able to change the monitored channel in Monitor Mode, because I see that it changes from capture to capture. Thanks.
Thanks Bob and Guy to try helping me! Here are the additional info requested:
The host system is a PC running Windows 10.
On top of it I've installed Oracle VM 7.0.
The linux distribution is Ubuntu 18.04.
I've installed Wireshark on Ubuntu from the repository wireshark-dev/stable.
The purpose of this exercise is to sniffer in monitor mode on wifi 802.11 the behavior of different smartphones, specifically how they send the "Probe Request" messages according to various conditions (display active/inactive, wifi connected/non connected, power save on/off). To do this sniffing I was told to buy the D-Link wireless N nano USB adapter and to configure it on Ubuntu.
I installed it taking the drivers from the repository kelebek333/kablosuz (I got his info by looking at other chats on the topic). So I confirm that the WiFi adapter is connected to the guest machine.
Then I have to enable monitor mode, following the following procedure (for simplicity "wlan0" stands for the name of my interface):
- ifconfig "wlan0" down
- airmon-ng check kill
- iwconfig "wlan0" mode monitor
..... here I usually get an error, but as found on the chat I have to ifconfig "wlano0" up and then retry all the commands until they are OK.
I check that the interface is in monitor mode by running iwconfig.
At this point I run wireshark (on the guest) it works, but I can not specify the channel on which to do the sniffing (the display always says "channel 1"). But I've noticed, looking into the IEEE802.11 radio information section, that the channel is not always 1: sometimes it it 11 and when this happens I get many more records in my sniffing file. It seems that the actual channel selection (the one shown in the radio information section) is done randomly. My question is: is there a way in which I can tell wireshark the channel on which doing the sniffing ? (So far I just saw channel 1 or 11, never seen channel 6). Thanks again for any suggenstion you may give me.
Hi Bob, yes I've tried to use airmon-ng start "wlan0", and I don't know how, but this command hangs forever. I don't have the prompt back and I have to close the monitor window. That's why I moved to the iwconfig command instead. Sorry for the confusion, you are right: I installed Oracle Virtualbox on Windows 10 and I have Ubuntu distro as VM. Then I installed wireshark on Ubuntu. Thanks again!
Hi Guy, the only adapter I'm using on Ubuntu VM is the D-Link wireless N nano USB adapter (8192eu). I read that in order to configure a USB device on an Oracle VM the procedure is ...
Comments
So version 18.04 of some Linux distribution is the guest machine on Oracle VM? If so, what distribution is it, and what is the host operating system (the OS on which Oracle VM is running)?
And presumably Wireshark is running on the guest machine, right?
Is the Wi-Fi adapter attached to the guest machine? It's presumably an adapter on the host machine, but, at least with VMware Fusion on macOS, if you plug a USB device in to the host, Fusion asks whether it should be connected to the host or one of the guests.
If you read the docs for airmon-ng, you can check kill to stop interfering processes and also use it to start the interface in monitor mode on a channel. I would suggest this approach.
This is a little confusing - I think you installed VirtualBox and have Ubuntu distro as a VM. Oracle makes a Linux distribution, too.
So what are the adapters on the Ubuntu VM? And do you have any USB adapters plugged into the Windows machine that Oracle VM assigned to the guest machine? If so, is wlan0 one of those?