Aircrack-ng forum

General Category => Newbies => Topic started by: Hurrelman on March 25, 2014, 07:50:12 pm

Title: EDIMAX EW-7811UN - unable to set to monitor mode
Post by: Hurrelman on March 25, 2014, 07:50:12 pm
Hi!

I recently bought an EDIMAX EW-7811UN that should support monitor mode. Drivers should already be installed at my pi.
The stick is connected and got an IP.
If I run airmon-ng start wlan0 I get the following output:
Code: [Select]
Found 6 processes that could cause trouble.
If airodump-ng, aireplay-ng or airtun-ng stops working after
a short period of time, you may want to kill (some of) them!
-e
PID Name
1610 ifplugd
1628 ifplugd
1652 ifplugd
1680 wpa_supplicant
1990 dhclient
2211 dhclient
Process with PID 1610 (ifplugd) is running on interface wlan0
Process with PID 1680 (wpa_supplicant) is running on interface wlan0
Process with PID 2211 (dhclient) is running on interface wlan0


Interface Chipset Driver

wlan0 Unknown rtl8192cu (monitor mode enabled)

For my other USB device mon0 was created, but here it tells me that monitor mode was enabled. However iwconfig says wlan0 was in managed, not in monitored mode. And is it wrong that the chipset is unknown?
I continued running airodump_ng wlan0 and get
Code: [Select]
ioctl(SIOCSIWMODE) failed: Invalid argument

ARP linktype is set to 1 (Ethernet) - expected ARPHRD_IEEE80211,
ARPHRD_IEEE80211_FULL or ARPHRD_IEEE80211_PRISM instead.  Make
sure RFMON is enabled: run 'airmon-ng start wlan0 <#>'
Sysfs injection support was not found either.

I have no idea what to do, I googled some time, but did not find help.

iwconfig lists wlan0 as managed, not as monitor mode.

Can anybody help me please?
Title: Re: EDIMAX EW-7811UN - unable to set to monitor mode
Post by: syworks on March 28, 2014, 03:04:58 am
Try manually set your interface to monitoring mode

Iwconfig ~ to make sure ur wireless interface is indeed wlan0
If yes, try this

Ifconfig wlan0 down
Iwconfig wlan0 mode monitor

Title: Re: EDIMAX EW-7811UN - unable to set to monitor mode
Post by: Jano on March 28, 2014, 10:28:59 pm
Hi to all,
- With the introduction of "iw" I suggest to use this command:
Code: [Select]
sudo iw dev wlan0 interface add mon0 type monitor(because "iwconfig" command sometimes can not work properly)

- This is an example:
Code: [Select]
jano:~$ iwconfig
lo        no wireless extensions.

eth0      no wireless extensions.

eth1      IEEE 802.11abg  ESSID:"Silver Surfer_nomap" 
          Mode:Managed  Frequency:2.437 GHz  Access Point: xx:xx:xx:8F:58:F2   
          Bit Rate=54 Mb/s   Tx-Power=20 dBm   
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Power Management:off
          Link Quality=58/70  Signal level=-52 dBm 
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:11   Missed beacon:0

jano:~$ sudo iwconfig eth1 mode monitor
Error for wireless request "Set Mode" (8B06) :
    SET failed on device eth1 ; Device or resource busy.
jano:~$ iwconfig
lo        no wireless extensions.

eth0      no wireless extensions.

eth1      IEEE 802.11abg  ESSID:"Silver Surfer_nomap" 
          Mode:Managed  Frequency:2.437 GHz  Access Point: xx:xx:xx:8F:58:F2   
          Bit Rate=54 Mb/s   Tx-Power=20 dBm   
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Power Management:off
          Link Quality=53/70  Signal level=-57 dBm 
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:1   Missed beacon:0

Code: [Select]
jano:~$ sudo iw dev eth1 interface add mon0 type monitor
jano:~$ iwconfig
lo        no wireless extensions.

mon0      IEEE 802.11abg  Mode:Monitor  Tx-Power=20 dBm   
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Power Management:off
         
eth0      no wireless extensions.

eth1      IEEE 802.11abg  ESSID:"Silver Surfer_nomap" 
          Mode:Managed  Frequency:2.437 GHz  Access Point: xx:xx:xx:8F:58:F2
          Bit Rate=54 Mb/s   Tx-Power=20 dBm   
          Retry  long limit:7   RTS thr:off   Fragment thr:off
          Power Management:off
          Link Quality=61/70  Signal level=-49 dBm 
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:3   Missed beacon:0

- And run the Aireplay-ng injection test.

Bye Jano