Set the USB wireless network card to monitor mode
When users implement wireless network penetration, setting the wireless network card to monitor mode is an essential operation. University PA IT Daren Information Security Technology Lecture Room Under normal circumstances, users will encounter various problems, such as network card does not support, network interface can not be found. The problem for the NIC interface cannot be found because the interface name is no longer wlanX, but wlanXmon instead of the original wlanX. If the network card does not support, most of the driver installation fails. Before setting the monitoring mode, the user can first use airmon-ng to view the information of the wireless network card device, to know if its monitor mode wifi adapter and it has been determined that it can work normally. The following will introduce the setting of wireless network card to monitor mode:
(1) View the USB device list of this machine. The execution command is as follows:
- C:\root>lsusb
Bus 001 Device 004: ID 148f: 5370 Ralink Technology, Corp. RT5370 Wireless Adapter
It can be seen from the output information that the connected USB wireless network card is successfully listed.
(2) View network interface information. As follows:
- C:\root>ifconfig
wlan0: flags = 4099 <UP, BROADCAST, MULTICAST> mtu 1500
ether de: 31: 49: 2a: 3b: 79 txqueuelen 1000 (Ethernet)
RX packets 0 bytes 0 (0.0 B)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 0 bytes 0 (0.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
You can see from the output information that there is wlan0 interface information. This shows that the wireless network card has been activated.
(3) View wireless network card information. As follows:
- C:\root>airmon-ng
PHY Interface Driver Chipset
phy2 wlan0 rt2800usb Ralink Technology, Corp. RT5370
It can be seen from the output information that the interface, driver and chip of the wireless network card have been successfully identified. This shows that the wireless network card can work normally.
(4) Check the working mode of the wireless network card. As follows:
- C: \ root> iwconfig
wlan0 IEEE 802.11 ESSID: off / any
Mode: Managed Access Point: Not-Associated Tx-Power = 20 dBm
Retry short long limit: 2 RTS thr: off Fragment thr: off
Encryption key: off
Power Management: off
lo no wireless extensions.
eth0 no wireless extensions.
From the output information, you can see that the current wireless network card working mode is Managed.
(5) Set the wireless network card to monitor mode. As follows:
- C:\root> airmon-ng start wlan0
Found 2 processes that could cause trouble.
Kill them using 'airmon-ng check kill' before putting
the card in monitor mode, they will interfere by changing channels
and sometimes putting the interface back in managed mode
PID Name
771 NetworkManager
2609 wpa_supplicant
PHY Interface Driver Chipset
phy2 wlan0 rt2800usb Ralink Technology, Corp. RT5370
(mac80211 monitor mode vif enabled for [phy2] wlan0 on [phy2] wlan0mon)
(mac80211 station mode vif disabled for [phy2] wlan0)
You can see from the output information that the wireless network card monitoring mode has been successfully activated. Among them, the listening mode interface is wlan0mon.
(6) Check the working mode of the wireless network card. As follows:
- C:\root>iwconfig
lo no wireless extensions.
eth0 no wireless extensions.
wlan0mon IEEE 802.11 Mode: Monitor Frequency: 2.457 GHz Tx-Power = 20 dBm
Retry short long limit: 2 RTS thr: off Fragment thr: off
Power Management: off
As can be seen from the output information, the wireless network card interface mode is Monitor (monitor mode).
