Hi! I have a pci atheros card AR5212/AR5213 (rev 01) with madwifi driver and ubuntu 11.10. I installed wireshark 1.6.2. I created an interface in monitor mode but wireshark doesn't see it in monitor mode (the check box is grey). Could you please help me? Sboong PS. This card works great with kismet. asked 16 Nov '11, 12:56  _sbOOng_ |
One Answer:
Just try capturing on the monitor device without checking the monitor mode box. Checking the monitor mode box causes Wireshark to ask libpcap to set up monitor mode; in Linux distributions where libpcap is not linked with libnl, which includes Debian and its derivatives such as Ubuntu, that doesn't work with libpcap 1.1.0 or 1.1.1, as provided with Ubuntu. Therefore, you need to run airmon-ng to set up the monitor device (as libpcap isn't linked with libnl, it won't set up the monitor device itself) and, as the monitor device is already in monitor mode, there's no need to have Wireshark ask libpcap to put it into monitor mode and, in fact, libpcap's attempt to do so won't work. answered 23 Jan '12, 15:05  Guy Harris ♦♦ |
Did you happen to find a solution to your problem? I am experiencing the same things. Only i am trying to use ath5k.