Jump to content

Very easy question about promiscious / monitor modes.


michael_kent123
 Share

Recommended Posts

Promiscuous mode - ability to see packets on the wifi network you are connected to that are not directed to your MAC.

Monitor mode - ability to see packets on wifi networks to which you are not connected but that your NIC can sniff.

However, since modern networks are switches rather than hubs, promiscuous mode no longer really exists.

Therefore, am I correct when I say that:

Monitor mode is like promiscuous mode for the network you are connected to plus you can also view nearby networks.

So, if I am on SSID "Hello" and my friend is on "Hello" and he sends a non-SSL username:password to his e-mail provider, and I am in monitor mode, then I can view that password in Wireshark.

Is that correct? Thanks!

Link to comment
Share on other sites

Hi Michael,

In Promiscuous mode, if you are connected to a hub you are correct however if not you probably only see ARP and BROADCAST activity in addition to your local node.

If you want to enable monitor mode:

ifconfig wlan0 down

iwconfig wlan0 mode monitor

ifconfig wlan0 up

Try that and see if you do see additional traffic.

Link to comment
Share on other sites

I know for a fact you had promiscuous mode before wifi existed and always thought it meant your network adapter would willingly pass onto the OS's network layer anything that flowed in and allowing it to spew out any stream of bits you deemed fit for the network, regardless of protocol or good taste. It truly did make your device a complete whore to the network.

Link to comment
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...