* Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) @ 2015-05-18 7:01 darklight wu 2015-05-18 7:26 ` Emmanuel Grumbach 0 siblings, 1 reply; 6+ messages in thread From: darklight wu @ 2015-05-18 7:01 UTC (permalink / raw) To: linux-wireless Hi, All: I configured the Wifi Monitor mode with Intel 7260 card under Ubuntu14.04 and then used Wireshark to capture packets from air. But I could only get management/control packets but no data packets. I tried different channels and also with HT20 or HT40+/-. The commands I used were: iw dev wlan0 interface add mon0 type monitor iw dev wlan0 del //I googled and was told I needed to delete the wlan0 first. Or else I got device busy (-16) error ifconfig mon0 up iw dev mon0 set channel 1 I also tried to use other ways like "airmon-ng start wlan0". All the observations were same, no data packets. It's weird! Anyone has a clue? Thanks! dlw ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) 2015-05-18 7:01 Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) darklight wu @ 2015-05-18 7:26 ` Emmanuel Grumbach 2015-05-19 16:44 ` darklight wu 0 siblings, 1 reply; 6+ messages in thread From: Emmanuel Grumbach @ 2015-05-18 7:26 UTC (permalink / raw) To: darklight wu; +Cc: linux-wireless On Mon, May 18, 2015 at 10:01 AM, darklight wu <darklightwu@gmail.com> wrote: > Hi, All: > > I configured the Wifi Monitor mode with Intel 7260 card under > Ubuntu14.04 and then used Wireshark to capture packets from air. But I > could only get management/control packets but no data packets. I tried > different channels and also with HT20 or HT40+/-. > > The commands I used were: > > iw dev wlan0 interface add mon0 type monitor > iw dev wlan0 del //I googled and was told I needed to delete the > wlan0 first. Or else I got device busy (-16) error > ifconfig mon0 up > iw dev mon0 set channel 1 > > I also tried to use other ways like "airmon-ng start wlan0". All the > observations were same, no data packets. It's weird! Anyone has a > clue? > This is weird. But I recommend to add power_scheme=1 as a module parameter to iwlmvm. Since iwlmvm is loaded automatically, you'll need to add that to /etc/modprobe.d/iwlwifi.conf. 14.04 ships 3.13 and I remember we had issues with monitor mode at that time. You may want to try a newer kernel. ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) 2015-05-18 7:26 ` Emmanuel Grumbach @ 2015-05-19 16:44 ` darklight wu 2015-05-19 17:41 ` Emmanuel Grumbach 0 siblings, 1 reply; 6+ messages in thread From: darklight wu @ 2015-05-19 16:44 UTC (permalink / raw) To: Emmanuel Grumbach; +Cc: linux-wireless On Mon, May 18, 2015 at 3:26 PM, Emmanuel Grumbach <egrumbach@gmail.com> wrote: > On Mon, May 18, 2015 at 10:01 AM, darklight wu <darklightwu@gmail.com> wrote: >> Hi, All: >> >> I configured the Wifi Monitor mode with Intel 7260 card under >> Ubuntu14.04 and then used Wireshark to capture packets from air. But I >> could only get management/control packets but no data packets. I tried >> different channels and also with HT20 or HT40+/-. >> >> The commands I used were: >> >> iw dev wlan0 interface add mon0 type monitor >> iw dev wlan0 del //I googled and was told I needed to delete the >> wlan0 first. Or else I got device busy (-16) error >> ifconfig mon0 up >> iw dev mon0 set channel 1 >> >> I also tried to use other ways like "airmon-ng start wlan0". All the >> observations were same, no data packets. It's weird! Anyone has a >> clue? >> > > This is weird. But I recommend to add power_scheme=1 as a module > parameter to iwlmvm. Since iwlmvm is loaded automatically, you'll need > to add that to /etc/modprobe.d/iwlwifi.conf. > 14.04 ships 3.13 and I remember we had issues with monitor mode at > that time. You may want to try a newer kernel. I tried again today with "power_scheme=1" and also booted with Ubuntu 15.04. Both still failed to work in monitor mode. And with Ubuntu 15.04, I event could not configure the nic to work on monitor mode. The same commands at least can set the monitor mode under 14.04. Meanwhile, I just want to clarify, the nic could capture data packets to/from itself but could not capture others that were not belongs to it. My co-worker tried on another machine with Ubuntu 14.04, he was also failed. Any tricks here? ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) 2015-05-19 16:44 ` darklight wu @ 2015-05-19 17:41 ` Emmanuel Grumbach 2015-05-20 3:43 ` Matt Chen 0 siblings, 1 reply; 6+ messages in thread From: Emmanuel Grumbach @ 2015-05-19 17:41 UTC (permalink / raw) To: darklight wu; +Cc: linux-wireless On Tue, May 19, 2015 at 7:44 PM, darklight wu <darklightwu@gmail.com> wrote: > On Mon, May 18, 2015 at 3:26 PM, Emmanuel Grumbach <egrumbach@gmail.com> wrote: >> On Mon, May 18, 2015 at 10:01 AM, darklight wu <darklightwu@gmail.com> wrote: >>> Hi, All: >>> >>> I configured the Wifi Monitor mode with Intel 7260 card under >>> Ubuntu14.04 and then used Wireshark to capture packets from air. But I >>> could only get management/control packets but no data packets. I tried >>> different channels and also with HT20 or HT40+/-. >>> >>> The commands I used were: >>> >>> iw dev wlan0 interface add mon0 type monitor >>> iw dev wlan0 del //I googled and was told I needed to delete the >>> wlan0 first. Or else I got device busy (-16) error >>> ifconfig mon0 up >>> iw dev mon0 set channel 1 >>> >>> I also tried to use other ways like "airmon-ng start wlan0". All the >>> observations were same, no data packets. It's weird! Anyone has a >>> clue? >>> >> >> This is weird. But I recommend to add power_scheme=1 as a module >> parameter to iwlmvm. Since iwlmvm is loaded automatically, you'll need >> to add that to /etc/modprobe.d/iwlwifi.conf. >> 14.04 ships 3.13 and I remember we had issues with monitor mode at >> that time. You may want to try a newer kernel. > > I tried again today with "power_scheme=1" and also booted with Ubuntu > 15.04. Both still failed to work in monitor mode. And with Ubuntu > 15.04, I event could not configure the nic to work on monitor mode. > The same commands at least can set the monitor mode under 14.04. > Meanwhile, I just want to clarify, the nic could capture data packets > to/from itself but could not capture others that were not belongs to > it. My co-worker tried on another machine with Ubuntu 14.04, he was > also failed. > > Any tricks here? You must not have any interface besides the monitor interface. I bet you still have the wpa_supplicant running and this is why you only have a virtual monitor interface that catches the packet from your managed interface only. ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) 2015-05-19 17:41 ` Emmanuel Grumbach @ 2015-05-20 3:43 ` Matt Chen 2015-05-20 4:00 ` darklight wu 0 siblings, 1 reply; 6+ messages in thread From: Matt Chen @ 2015-05-20 3:43 UTC (permalink / raw) To: darklight wu; +Cc: linux-wireless, Emmanuel Grumbach probably you need to disable your NetworkManager and wpa_supplicant. Then switch/change your mode to monitor. Make sure the command "iw [interface_name] info" shows you the type is monitor. 2015-05-20 1:41 GMT+08:00 Emmanuel Grumbach <egrumbach@gmail.com>: > On Tue, May 19, 2015 at 7:44 PM, darklight wu <darklightwu@gmail.com> wrote: >> On Mon, May 18, 2015 at 3:26 PM, Emmanuel Grumbach <egrumbach@gmail.com> wrote: >>> On Mon, May 18, 2015 at 10:01 AM, darklight wu <darklightwu@gmail.com> wrote: >>>> Hi, All: >>>> >>>> I configured the Wifi Monitor mode with Intel 7260 card under >>>> Ubuntu14.04 and then used Wireshark to capture packets from air. But I >>>> could only get management/control packets but no data packets. I tried >>>> different channels and also with HT20 or HT40+/-. >>>> >>>> The commands I used were: >>>> >>>> iw dev wlan0 interface add mon0 type monitor >>>> iw dev wlan0 del //I googled and was told I needed to delete the >>>> wlan0 first. Or else I got device busy (-16) error >>>> ifconfig mon0 up >>>> iw dev mon0 set channel 1 >>>> >>>> I also tried to use other ways like "airmon-ng start wlan0". All the >>>> observations were same, no data packets. It's weird! Anyone has a >>>> clue? >>>> >>> >>> This is weird. But I recommend to add power_scheme=1 as a module >>> parameter to iwlmvm. Since iwlmvm is loaded automatically, you'll need >>> to add that to /etc/modprobe.d/iwlwifi.conf. >>> 14.04 ships 3.13 and I remember we had issues with monitor mode at >>> that time. You may want to try a newer kernel. >> >> I tried again today with "power_scheme=1" and also booted with Ubuntu >> 15.04. Both still failed to work in monitor mode. And with Ubuntu >> 15.04, I event could not configure the nic to work on monitor mode. >> The same commands at least can set the monitor mode under 14.04. >> Meanwhile, I just want to clarify, the nic could capture data packets >> to/from itself but could not capture others that were not belongs to >> it. My co-worker tried on another machine with Ubuntu 14.04, he was >> also failed. >> >> Any tricks here? > > You must not have any interface besides the monitor interface. I bet > you still have the wpa_supplicant running and this is why you only > have a virtual monitor interface that catches the packet from your > managed interface only. > -- > To unsubscribe from this list: send the line "unsubscribe linux-wireless" in > the body of a message to majordomo@vger.kernel.org > More majordomo info at http://vger.kernel.org/majordomo-info.html ^ permalink raw reply [flat|nested] 6+ messages in thread
* Re: Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) 2015-05-20 3:43 ` Matt Chen @ 2015-05-20 4:00 ` darklight wu 0 siblings, 0 replies; 6+ messages in thread From: darklight wu @ 2015-05-20 4:00 UTC (permalink / raw) To: Matt Chen; +Cc: linux-wireless, Emmanuel Grumbach Yes, it works now! What I did was to disable network by unchecking "Enable Networking" in the network notification area in Ubuntu. It's easier than to kill processes manually. Thank you all for the help! - dlw On Wed, May 20, 2015 at 11:43 AM, Matt Chen <mattsled@gmail.com> wrote: > probably you need to disable your NetworkManager and wpa_supplicant. > Then switch/change your mode to monitor. Make sure the command "iw > [interface_name] info" shows you the type is monitor. > > 2015-05-20 1:41 GMT+08:00 Emmanuel Grumbach <egrumbach@gmail.com>: >> On Tue, May 19, 2015 at 7:44 PM, darklight wu <darklightwu@gmail.com> wrote: >>> On Mon, May 18, 2015 at 3:26 PM, Emmanuel Grumbach <egrumbach@gmail.com> wrote: >>>> On Mon, May 18, 2015 at 10:01 AM, darklight wu <darklightwu@gmail.com> wrote: >>>>> Hi, All: >>>>> >>>>> I configured the Wifi Monitor mode with Intel 7260 card under >>>>> Ubuntu14.04 and then used Wireshark to capture packets from air. But I >>>>> could only get management/control packets but no data packets. I tried >>>>> different channels and also with HT20 or HT40+/-. >>>>> >>>>> The commands I used were: >>>>> >>>>> iw dev wlan0 interface add mon0 type monitor >>>>> iw dev wlan0 del //I googled and was told I needed to delete the >>>>> wlan0 first. Or else I got device busy (-16) error >>>>> ifconfig mon0 up >>>>> iw dev mon0 set channel 1 >>>>> >>>>> I also tried to use other ways like "airmon-ng start wlan0". All the >>>>> observations were same, no data packets. It's weird! Anyone has a >>>>> clue? >>>>> >>>> >>>> This is weird. But I recommend to add power_scheme=1 as a module >>>> parameter to iwlmvm. Since iwlmvm is loaded automatically, you'll need >>>> to add that to /etc/modprobe.d/iwlwifi.conf. >>>> 14.04 ships 3.13 and I remember we had issues with monitor mode at >>>> that time. You may want to try a newer kernel. >>> >>> I tried again today with "power_scheme=1" and also booted with Ubuntu >>> 15.04. Both still failed to work in monitor mode. And with Ubuntu >>> 15.04, I event could not configure the nic to work on monitor mode. >>> The same commands at least can set the monitor mode under 14.04. >>> Meanwhile, I just want to clarify, the nic could capture data packets >>> to/from itself but could not capture others that were not belongs to >>> it. My co-worker tried on another machine with Ubuntu 14.04, he was >>> also failed. >>> >>> Any tricks here? >> >> You must not have any interface besides the monitor interface. I bet >> you still have the wpa_supplicant running and this is why you only >> have a virtual monitor interface that catches the packet from your >> managed interface only. >> -- >> To unsubscribe from this list: send the line "unsubscribe linux-wireless" in >> the body of a message to majordomo@vger.kernel.org >> More majordomo info at http://vger.kernel.org/majordomo-info.html ^ permalink raw reply [flat|nested] 6+ messages in thread
end of thread, other threads:[~2015-05-20 4:01 UTC | newest] Thread overview: 6+ messages (download: mbox.gz / follow: Atom feed) -- links below jump to the message on this page -- 2015-05-18 7:01 Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) darklight wu 2015-05-18 7:26 ` Emmanuel Grumbach 2015-05-19 16:44 ` darklight wu 2015-05-19 17:41 ` Emmanuel Grumbach 2015-05-20 3:43 ` Matt Chen 2015-05-20 4:00 ` darklight wu
This is a public inbox, see mirroring instructions for how to clone and mirror all data and code used for this inbox; as well as URLs for NNTP newsgroup(s).