Sniff and decode wifi packets?

Dec 16, 2005 2 Replies

Hi All What software can do the following:



-place my wifi card in promiscous mode



-capture all wireless network packets and decode them, presenting the TCP/IP pieces of it and the payload?



Thanks, David



Ethereal on Linux Airopeek for example on Windows

The first is the free option but you do need a supported card, see the ethereal website, you didn't say what OS or card.

David.

Very few drivers for Windoze will put cards in the promiscuous mode. All the Linux wireless card drivers will do that. That's why most such sniffing is done with Linux based utilities.

I suggest you download and run one of the Linux LiveCD distributions that are designed for Wireless. They contain everything you need in addition to some goodies you probably didn't know you needed.

formatting link
boot the cdrom on your laptop, it automagically recognizes the hardware, and you sniff away merrily. No reformatting and installing Linux on your laptop hard disk required.

Ethereal will capture and decode packets. However, you'll need something else if you're planning to look at the encrypted contents or reassemble the packets.

Airopeek SE is $895 plus $300/year support. Airopeek NX is $2995 plus $675/yr for support.

Right. See:

formatting link
list of tested wireless cards.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required