The Ethical Hacker Network - Tools for Wifi sniffing

m0rg4n

Newbie

Offline

Posts: 7

Tools for Wifi sniffing

« on: June 21, 2010, 02:01:52 PM »

Ok... I am having some issues with commview for wifi 6.3 and I am in need of a new (free/cheap) tool for wifi packet sniffing. I have a strong preference for GUI since my boss has no idea and wants to be able to see what's going on. Anyone have any suggestions?

Further, if anyone could explain to me why commview is freking out and telling me that I'm in compatibility mode (when I'm not) it would be helpful. Thanks!


	Logged

Ketchup

Hero Member

Offline

Posts: 1021

Re: Tools for Wifi sniffing

« Reply #1 on: June 21, 2010, 03:13:55 PM »

Have you tried Wireshark?


	Logged

~~~~~~~~~~~~~~
Ketchup

UNIX

Hero Member

Offline

Posts: 1235

Re: Tools for Wifi sniffing

« Reply #2 on: June 21, 2010, 03:29:02 PM »

I'd also recommend Wireshark. You might find this list useful as well.


	Logged

m0rg4n

Newbie

Offline

Posts: 7

Re: Tools for Wifi sniffing

« Reply #3 on: June 21, 2010, 05:24:12 PM »

I have wireshark but don't have the necessary hardware for wireless monitoring with that program.


	Logged

chrisj

Hero Member

Offline

Posts: 1163

Re: Tools for Wifi sniffing

« Reply #4 on: June 21, 2010, 10:06:33 PM »

Quote from: m0rg4n on June 21, 2010, 05:24:12 PM

I have wireshark but don't have the necessary hardware for wireless monitoring with that program.

shouldn't any wireless card work? I know sometimes there are hoops to jump through. How are you testing without a card with commview?


	Logged

OSWP, Sec+

m0rg4n

Newbie

Offline

Posts: 7

Re: Tools for Wifi sniffing

« Reply #5 on: June 22, 2010, 08:55:22 AM »

It's strange, I know, but Wireshark uses a tool called airpcap...which costs anywhere from $200+ but commview for wifi simply shuts off your net connection and just starts listening. Which is why I enjoyed the program for the very short period that I had it running.

I was thinking there might be something in the registry that screwed up but to be honest I don't trust myself in there. Perhaps someone could give Commview for Wifi a shot and see if it works for them. You can find it on www.tamos.com and they have different variations but the one I find most useful if Commview for Wifi since most of us use wireshark for ethernet capturing.

I would love to just get the program working again. Sad


	Logged

m0rg4n

Newbie

Offline

Posts: 7

Re: Tools for Wifi sniffing

« Reply #6 on: June 22, 2010, 08:57:57 AM »

if anyone knows how to listen to a wifi network from the outside with wireshark, that info would be mucho helpful as well. Cheesy


	Logged

Ketchup

Hero Member

Offline

Posts: 1021

Re: Tools for Wifi sniffing

« Reply #7 on: June 22, 2010, 09:35:26 AM »

Can you switch to Linux? Ubuntu is very easy to get going and should let you sniff any traffic you want in Wireshark?

Also, Windows should only give you an issue with monitor mode. You should still be able to sniff after association in promiscuous mode, but that may not be enough for you.


	Logged

~~~~~~~~~~~~~~
Ketchup

m0rg4n

Newbie

Offline

Posts: 7

Re: Tools for Wifi sniffing

« Reply #8 on: June 22, 2010, 12:50:31 PM »

Thanks for the advice. I'm an information management officer in the military and my job at the moment is to play red-hat and show these guys how easy it is to break certain encryption. After contacting the techies at Tamosoft, I have resolved the issue with that program, works fine now. Anyone interested in wifi packet capture, trust me, this program, while expensive, is probably one of the best and most user friendly ones out there.
Now I just have to aquire the fundage to get the full version. Undecided

sometimes piracy isn't the crime...sometimes the crime is charging $1000 for a single-purpose computer program and damn-near forcing people to pirate the software. What a shame. Thanks again!


	Logged

Phaile

Newbie

Offline

Posts: 1

Re: Tools for Wifi sniffing

« Reply #9 on: July 22, 2010, 11:36:46 AM »

Not sure if this will help, but in my course/co-op at my college we strictly use Wireshark and the wireless sniffing works. We had to install winpcap which is a free download and I have not had any issues sniffing on the network, either hardwired in or on wireless. You can grab winpcap here: http://www.winpcap.org/install/default.htm

Again, not sure if it will solve your problem as I am still in the process of learning.


	Logged

chrisj

Hero Member

Offline

Posts: 1163

Re: Tools for Wifi sniffing

« Reply #10 on: July 22, 2010, 01:10:46 PM »

going back to Ketchup's idea of Linux... Aircrack Suite?


	Logged

OSWP, Sec+

secureseven

Jr. Member

Offline

Posts: 79

Re: Tools for Wifi sniffing

« Reply #11 on: July 22, 2010, 02:01:56 PM »

I agree with the others. I don't think I've ever had problems with wireshark in windows or linux. And as chrisj said, you can use aircrack-ng suite and most likely netstumbler to capture packets.


	Logged

http://twitter.com/mikesantillana
eLearnSecurity Team Member.

jimbob

Guest

Re: Tools for Wifi sniffing

« Reply #12 on: July 22, 2010, 02:49:54 PM »

Quote from: m0rg4n on June 22, 2010, 08:55:22 AM

It's strange, I know, but Wireshark uses a tool called airpcap...which costs anywhere from $200+

libpcap is free and so is WireShark. It will run on both windows and Linux, and probably some other operating systems. Kismet is really great for monitoring and sniffing wireless networks, you might want to check that out.

Jimbob


	Logged

Pages: [1] Go Up

« previous next »