Does the new method work out of the box with Cali?
#4
Of course, Wireshark is able to capture packets in monitor mode:
https://wiki.wireshark.org/CaptureSetup/WLAN
but it will put them into monitor mode, running libpcap:
https://wiki.wireshark.org/CaptureSetup/...nitor_mode

hcxdumptool will put the device into monitor mode running ioctl() system calls. No third party tool needed.

iw use ioctl() system calls (like hcxdumptool does it) and libnl (Netlink).

iwconfig is deprecated and should not be used any longer.
https://dougvitale.wordpress.com/2011/12...lacements/

airmon-ng runs iw internally.


But keep in mind:
Nearly everything depend on the driver and its capabilites. Also many, many drivers doesn't support monitor mode and full packet injection:
https://wikidevi.com/wiki/Main_Page

Some examples:
It is possible that a version of a driver works nearly perfect:
rtl8812au v5.2.20
https://github.com/aircrack-ng/rtl8812au/issues/376
while newer versions (5.3.4) failed to run monitor mode and/or packet injection:
https://github.com/aircrack-ng/rtl8812au...-520844406

Also it is a long way to make a driver (nearly) perfect:
https://github.com/openwrt/mt76/issues/2...-500999516

But you can't be sure, that this (nearly) perfect driver will work in future times, if a new issue occured:
https://bugzilla.kernel.org/show_bug.cgi?id=202541
https://bugzilla.kernel.org/show_bug.cgi?id=202243
until it will be finally fixed.
Reply


Messages In This Thread
RE: Does the new method work out of the box with Cali? - by ZerBea - 08-15-2019, 02:05 PM