Find the answer to your Linux question:
Results 1 to 3 of 3
Howdy, I seem unable to be able to detect network traffic in promiscuous mode. In searching for the traffic to and from another computer, all I get, no matter what ...
Enjoy an ad free experience by logging in. Not a member yet? Register.
  1. #1
    Linux Newbie
    Join Date
    Jan 2004
    Location
    Houston, Tx
    Posts
    144

    Cannot Detect Network Traffic in Promiscuous Mode


    Howdy,

    I seem unable to be able to detect network traffic in promiscuous mode. In searching for the traffic to and from another computer, all I get, no matter what I do on the other computer is something like the following:

    Code:
    sudo tcpdump -nnvvtei wlan0 | grep -i 192.168.1.112
    tcpdump: listening on wlan0, link-type EN10MB (Ethernet), capture size 65535 bytes
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.106 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.68 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.109 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.1 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    00:1f:3c:95:d0:57 > ff:ff:ff:ff:ff:ff, ethertype ARP (0x0806), length 42: Ethernet (len 6), IPv4 (len 4), Request who-has 192.168.1.103 (ff:ff:ff:ff:ff:ff) tell 192.168.1.112, length 28
    Ad nauseum. I don't know what other details you need, or what might be wrong, but I'd appreciate any help I can get.

  2. #2
    Super Moderator Roxoff's Avatar
    Join Date
    Aug 2005
    Location
    Nottingham, England
    Posts
    3,851
    How are you connecting these computers? If you're connecting through a network hub, you'll see very little. You need a network switch (even a cheapo auto-detecting one) to do this.
    Linux user #126863 - see http://linuxcounter.net/

  3. #3
    Linux Newbie
    Join Date
    Jan 2004
    Location
    Houston, Tx
    Posts
    144
    Ahh, thank you. So basically I need new hardware to detect the wireless traffic going through my phone?

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •