wireless sniffer

aueddonline

hey guys I was looking for a wireless sniffer solution. do you need a special LAN card or can it be done with particular LAN cards with and some software?

tiersten

Particular cards and the correct software. Look up Kismet.

dynamik

The support seems to have gotten a lot better recently. I had to buy an Orinoco Gold card a couple of years ago, but now everything I have seems to work, including the integrated card on the laptop I originally bought the Orinoco for. You should still check the compatibility lists though. +1 for Kismet.

aueddonline

it looks like I may be better running kismit on a linux machine, right? and then find a card that supports raw monitoring

aueddonline

If anyone knows of a USB wireless card that would support RFMON under opensuse?

rbutturini

Generally anything with an Atheros chipset can be put into monitor mode, esp. under Linux; there are others, but I've been the happiest with the performance and stability of Atheros based solutions. Alfa makes some nice high powered USB adapters that can be used for RFMON as well but are a bit more expensive. There are patches that support putting the integrated Intel chipsets or Broadcom chips into monitor mode but I've found them to be a little bit buggy.

What exactly are you trying to do? Kismet is good for detecting wireless networks etc. but for actually sniffing of traffic there are some other tools out there I personally prefer.

aueddonline

rbutturini wrote:

Generally anything with an Atheros chipset can be put into monitor mode, esp. under Linux; there are others, but I've been the happiest with the performance and stability of Atheros based solutions. Alfa makes some nice high powered USB adapters that can be used for RFMON as well but are a bit more expensive. There are patches that support putting the integrated Intel chipsets or Broadcom chips into monitor mode but I've found them to be a little bit buggy.

What exactly are you trying to do? Kismet is good for detecting wireless networks etc. but for actually sniffing of traffic there are some other tools out there I personally prefer.

I'm doing the BCMSN at the moment which has quite a lot of wireless on it so I thought a fun side note I could do some wireless cracking using something like cain & able ( not sure if that works with linux) but that kind of thing

dynamik

Then you'd want something like this: http://www.aircrack-ng.org

aueddonline

dynamik wrote:

Then you'd want something like this: http://www.aircrack-ng.org

yeah that'll be the software sorted, there's this on the same site that's handy

http://www.aircrack-ng.org/doku.php?id=compatibility_drivers#which_is_the_best_card_to_buy

aueddonline

http://atheros.rapla.net/

Silentsoul

if your just looking to see what is around quick you can always use Netstumbler.

If you looking for the tools of the trade then take a look here.

http://www.wardrive.net/wardriving/tools/


everything a wardriver needs from Nix to Doze to BSD