Keep connection alive while running hcxdumptool
#3
(10-20-2022, 10:40 AM)ZerBea Wrote: Edit NetworkManager config to ignore the device that hcxdumptool use:
https://wiki.archlinux.org/title/NetworkManager
explained in chapter 7.7 Ignore specific devices

use BPF code to ignore the second device which is used for remote control and the router to which it is connected
Code:
--bpfc=<file>                      : input kernel space Berkeley Packet Filter (BPF) code
                                    affected: incoming and outgoing traffic - that include rca scan
                                    steps to create a BPF (it only has to be done once):
                                      set hcxdumptool monitormode
                                      $ hcxdumptool -m <interface>
                                      create BPF to protect a MAC
                                      $ tcpdump -i <interface> not wlan addr3 11:22:33:44:55:66 and not wlan addr2 11:22:33:44:55:66 -ddd > protect.bpf
                                      where addr3 protect ACCESS POINTs and addr2 protect CLIENTs
                                      recommended to protect own devices

run hcxdumptool (with options --bpfc and -c where you have to exclude the channel of the remote connection) and ignore the warning that NetworkManager is alive.

Thanks, for the tool and for the help. It worked!
Reply


Messages In This Thread
RE: Keep connection alive while running hcxdumptool - by panyer - 10-20-2022, 12:38 PM