Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] why i receive only packets to and from my machinein wlan

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Doug Fox" <dfox138@xxxxxxxxxxx>
Date: Sat, 2 Jul 2005 15:16:23 -0400
How can I find out if an adapter support promiscuous mode? Is there a software able to do it? Any pointers are apprecaited.

Thanks,


----- Original Message ----- From: "Guy Harris" <gharris@xxxxxxxxx>
To: "Ethereal user support" <ethereal-users@xxxxxxxxxxxx>
Sent: Friday, July 01, 2005 12:33 PM
Subject: Re: [Ethereal-users] why i receive only packets to and from my machinein wlan


jiang aimme wrote:
i used ethereal to capture wireless packets in red hat 9.0,i have used "ifconfig wl promisc" and set my wlan card in promiscuous mode.

Ethereal will do that for you - in fact, *by default* it puts the adapter in promiscuous mode (assuming the adapter supports promiscuous mode).

but why i receive only  packets to and from my machine .

Perhaps your wireless adapter - or the Linux driver that RH 9.0 is using - doesn't support promiscuous mode. Ask Red Hat about that.

For a wireless adapter, "promiscuous mode" seems to means "show me all traffic received by the adapter's radio that's traffic on the network with which the machine is associated". It will not, I think, capture other traffic; you might have to go into monitor mode for that; see

http://wiki.ethereal.com/CaptureSetup_2fWLAN

for information on capturing on 802.11 networks, and see

http://wiki.ethereal.com/CaptureSetup_2fWLAN#head-83ad8510bbd3f22363d068e1c96f82fd0fcccd31

for details on putting the adapter into monitor mode on Linux.

Note that putting the adapter into monitor mode might cause it not to be associated with a network, in which case the machine doing the capturing won't be able to use the wireless network while it's capturing in monitor mode. This refers to *any* use of the network - including doing IP-address-to-name lookups with DNS or NIS or... - so, if you put the adapter into monitor mode, you might have to disable IP-address-to-name lookups in order to prevent Ethereal from hanging.

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users