New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
OS X - Operating System General OS operation information and support

Wireless - Monitor Mode


Post Reply New Thread Subscribe

 
Thread Tools
JoshE121390

 
Member Since: Nov 10, 2011
Posts: 2
JoshE121390 is on a distinguished road

JoshE121390 is offline
Is it possible change your wireless mode to monitor mode on Mac OS X? I've done some research but all I found was something about AirPort Extreme, on Wikipedia. I know that this capability is available on some UNIX OSs (e.g. Ubuntu and can be done easily with the command "iwconfig <interface> mode monitor"). Does the AirPort not support monitor mode?

I'm using a 2.5 year-old MacBook running OS X (Version 10.6.8)

Thanks,
Josh
QUOTE Thanks
BrianLachoreVPI

 
BrianLachoreVPI's Avatar
 
Member Since: Feb 24, 2011
Location: Maryland
Posts: 3,742
BrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant futureBrianLachoreVPI has a brilliant future
Mac Specs: March 2011 15" MBP 2.3GHz i7 Quad Core 8GB Ram | Mid 2011 27" iMac 3.4 GHz i7 16 GB RAM 2 TB HDD

BrianLachoreVPI is offline
I did a quick google search on promiscuous mode mac os x - and came across this link. Looks like you can get part of what you're probably looking for.

CaptureSetup/WLAN - The Wireshark Wiki
QUOTE Thanks
JoshE121390

 
Member Since: Nov 10, 2011
Posts: 2
JoshE121390 is on a distinguished road

JoshE121390 is offline
Brian, thanks for your reply, problem solved! I guess you can't turn on monitor mode from the Terminal, and have to use Wireshark instead. In case anybody runs into this question in the future, here's how to fix it.

1. Install Wireshark from www.wireshark.org/dowload.html
2. Launch Wireshark and select the interface you would like to capture on.
3. Stop capturing.
4. In the menu bar go to Capture > Options...
5. In the capture group box, check the check boxes "Capture packets in promiscuous mode" AND "Capture packets in monitor mode" (these options will allow you to sniff all IEEE 802.11 web traffic that your device is capable of sniffing)
6. Click the Start button
QUOTE Thanks
Luxanon

 
Member Since: Jan 04, 2013
Posts: 1
Luxanon is on a distinguished road

Luxanon is offline
It is possible to enable monitor mode from Terminal.

-- Most OS versions have a private framework called "Airport"
-- This is your WiFi scanning framework
-- You can enable it through the terminal with the following commands

1) Enter --> "sudo ln -s /System/Library/PrivateFrameworks/Apple80211.framework/\ Versions/Current/Resources/airport /usr/sbin/airport" <-- without quotes.

-- This moves our private framework (airport) to our sbin
-- This allows us to simply open terminal and type "airport -s" to scan the WiFi networks
-- To enable sniffing you need to enter this command...

2) Enter --> "sudo airport sniff CHANNEL" <-- replacing CHANNEL with the channel number you would like to sniff.

-- This enables monitor mode, continuously scanning on the channel you provide.
-- To exit monitor mode you press ^C or (CTRL+C) this will save a dump file to your /tmp/ folder under the extension .cap

***
-- If for some reason you don't exit with ^C your computer will be stuck in monitor mode.
-- To fix this enter --> "ps -A" <-- find the line that contains "airport sniff CHANNEL" and look at the corresponding number.
-- Then enter --> "sudo kill -9 NUMBER" replacing NUMBER with the number corresponding to the line in ps -A.
***

-- Hope this helps!
QUOTE Thanks

Post Reply New Thread Subscribe


« Can't install os x on macintosh hd | Viewing PDFs....... »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
Advice on Wired versus Wireless Keyboard and Mouse PixelMage Apple Desktops 3 04-01-2010 08:17 PM
MacBookPro1,1 wireless not working--options? breatheasy Internet, Networking, and Wireless 1 02-15-2010 02:19 AM
Wireless networking Bluewolf Internet, Networking, and Wireless 8 02-24-2009 03:12 PM
Long time, no see... youthpastor Schweb's Lounge 17 06-14-2008 01:39 AM
Adding Wireless Printer with Mac Pro: Airport or Print Server? NJRonbo Internet, Networking, and Wireless 0 01-11-2007 05:58 AM

All times are GMT -4. The time now is 01:19 AM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?