tcpdump mailing list archives
Re: does tcpdump catch all packets in the air?
From: Łukasz Strzałkowski <lukasz.strzalkowski () pjwstk edu pl>
Date: Sat, 26 May 2007 22:04:28 +0200
Probably because tcpdump isn't putting the interface into monitor mode
and the Kismet drone is probably putting the interface it's using into
monitor mode. If you're not in monitor mode, the adapter will only
see packets for the wireless network with which you're associated.
There's currently no API in libpcap to turn on monitor mode, and no
way in tcpdump to turn on monitor mode. You might be able to do so
from the command line; see
http://wiki.wireshark.org/CaptureSetup/WLAN
RF Monitor mode is usually set up manually from command line. In my case also.
this is how I have done: http://www.renderlab.net/projects/wrt54g/openwrt.htmlOn this router I've installed tcpdump and it dumps only my laptops activity. Strange.
Maybe filter fitlers too much? - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- does tcpdump catch all packets in the air? Łukasz Strzałkowski (May 21)
- Re: does tcpdump catch all packets in the air? Guy Harris (May 21)
- Re: does tcpdump catch all packets in the air? Łukasz Strzałkowski (May 26)
- Re: does tcpdump catch all packets in the air? Guy Harris (May 21)
