Record MAC addresses of probe requests

[ScottHelme]

I'm looking for a way to record MAC addresses that the Pineapple can see and wondering what the easiest/best approach would be.

I notice that Karma normally logs the MAC of a device when enabled, but I don't want to have any effect on devices. I put it in white list mode and left the list empty and it doesn't seem that it logs the beacons.

I assume it's possible to get kismet on there, though after a brief search, not much turned up.

Is there anything someone can point me to in the way of a guide or some information on how best to achieve this?

Cheers.

[Mr-Protocol]

Use airodump-ng. It's already on the pineapple.

[ScottHelme]

Use airodump-ng. It's already on the pineapple.

Thanks for the reply. I did think about airodump, but can it be configured to just record the MAC addresses of devices and not any packet data?

[Mr-Protocol]

You will have to parse it. The easiest way would be to just make the output file as a csv and manually parse it with whatever tool you want.

[ScottHelme]

But I will still have to capture all the associated traffic?

[Whistle Master]

I'm working on an infusion to do exactly what you're looking for but no ETA for the moment :) To record all the probe requests (e.g. ssid name, signal quality), mac addresses seen by a pineapple.

[Mr-Protocol]

But I will still have to capture all the associated traffic?

It isn't like running tcpdump or a packet sniffer. It will only capture what you want. the csv file is basically what it showing on your screen. Review the options: http://www.aircrack-ng.org/doku.php?id=airodump-ng