On Mon, Jan 05, 2004 at 11:10:13AM +0800, Ow Mun Heng wrote: > I will give it a try.. On another note, Over the weekend, I changed back to > using orinoco drivers and sniffing now works normally.
If you were using the Orinoco drivers when sniffing was working a month ago, and it stopped working after you changed to the hostap drivers, that could be the problem - it might be that promiscuous mode works with the Orinoco drivers but not with the hostap drivers. If so, you should definitely tell the hostap list about it. > Although I'm not sure if sniffing is only limited to the channel which I am > on. I'm not a radio expert, but I think that an 802.11 device can only receive on one channel - the manual for Sniffer Wireless indicates that it implements a "channel surfing" mode, but in that mode it appears to listen on a given channel for some number of seconds, and then switch to the next enabled channel and listen on that for some number of seconds, and so on - if you've configured it to look for a particular BSSID, it'll stop if it detects that BSSID on a given channel and will, I infer, capture traffic on that channel. You can also specify "trigger events" (particular types of packets to look for) and, if it gets a trigger event in channel surfing mode, it'll capture on the channel on which it saw that packet. That seems to imply that you can only capture traffic on one channel at a time. (I don't know whether that's an intrinsic limitation of 802.11; it might be possible to have an 802.11 card that taps multiple channels, although that card might require multiple DSPs to handle multiple channels. I suspect no cards do so.) > I only wanted to verify that it's not because there's some new advances in > wifi tech that stops sniffing. I don't know of any. (Perhaps some future form of 802.11 might use, for example, channel hopping with a pseudo-random pattern generated from a key that two hosts share in some fashion that prevents a third party from getting the key, e.g. some form of public-key encryption, so that a third party won't be able to follow the conversation between those two hosts, but I don't know of any form of 802.11 that does that now.) _______________________________________________ Ethereal-users mailing list [EMAIL PROTECTED] http://www.ethereal.com/mailman/listinfo/ethereal-users
