Aircrack-ng

Please login or register.

Login with username, password and session length
Pages: 1 ... 8 9 [10]
 91 
 on: March 20, 2019, 02:24:28 pm 
Started by techguy - Last post by techguy
Thank you for your reply. It sounds logical to me.

Can you also tell me about Block Ack Req and Request-to-send? Wireshark in column source displays MAC address and also in column destinstion there is MAC address. Next to the first there is (TA) and next to the second there is (RA). In the packet details there is Receiver address which contains MAC from source column and there is Transmitter Address which contains MAC from destination column. Both MAC addresses are not from AP of given - - bssid. Why airodump-ng captured this packet? Is it the same situation as previous?

 92 
 on: March 19, 2019, 08:50:19 pm 
Started by dangdog - Last post by dangdog
Could you point at a specific MAC, there are so many clients/AP in that CSV.

This device is an example that was turned off at approximately 00:25:00 but has continued to appear under the column Last Time Seen and the PWR continued to report at -59.  I would have expected either for the Last Time seen to have not progressed or the PWR to be reported as -1.


24:E3:14:AE:BD:46, 2019-03-20 00:02:50, 2019-03-20 00:38:03, -59,      152, 2C:30:33:E9:A9:96,DSMAED
24:E3:14:AE:BD:46, 2019-03-20 00:02:50, 2019-03-20 00:45:21, -59,      186, 2C:30:33:E9:A9:96,DSMAED

Please let me know if there is anything else I can do or provide you with.  Thanks in advance for looking into it.

 93 
 on: March 19, 2019, 08:16:08 pm 
Started by dangdog - Last post by misterx
Could you point at a specific MAC, there are so many clients/AP in that CSV.

 94 
 on: March 19, 2019, 08:15:30 pm 
Started by techguy - Last post by misterx
Frames usually have 3 addresses (sometimes 4).

Block Ack, CTS, ACK and such are control frames, they are the exception to the above rule. They are usually really short frames so they don't take much of airtime.

To give you an example, an ACK only contain the destination address. It is unknown who sent it. It  could be the AP, it could be something else. So, because it is unknown, airodump-ng keeps them.

 95 
 on: March 19, 2019, 03:20:31 pm 
Started by techguy - Last post by techguy
Hello everyone

airodump-ng - c channel - - bssid mac_of_ap - w file_path interface should capture packets only from or to AP of given - - bssid but Wireshark shows packets such as Block Ack, Block Ack Req, Acknowledgement, Clear-to-send, Request-to-send, CF-end from another network. Source column offten is empty and offten Mac Address has TA and Ra in source and destination column. Can someone explain this?

 96 
 on: March 17, 2019, 04:43:23 pm 
Started by dangdog - Last post by dangdog
Could you upload the CSV?

 97 
 on: March 17, 2019, 04:18:53 pm 
Started by dangdog - Last post by misterx
Could you upload the CSV?

 98 
 on: March 17, 2019, 04:16:58 pm 
Started by checksout - Last post by misterx
1. What driver is that?
2. Have you killed network managers before putting the card in monitor mode?

 99 
 on: March 17, 2019, 03:36:17 pm 
Started by checksout - Last post by checksout
ok so im new to kali linux and been working on this issue for a week now, I have a dual boot install on my acer aspire v nitro, windows 10 and kali linux.  I was able to get wifi to work and i can connect to a wifi network no problem, but when i run airodump-ng wlan0mon, no clients ever show up.  I go thru all the steps on airmon-ng first and everytime i get to airdoump-ng i get nothing on the clients list for networks to ever show up.  I bought 2 network adapters and the one im trying to use is an asus AC-68 that i cant get to work from what i can tell. Any help will be much appreciated.  Thanks everyone

 100 
 on: March 17, 2019, 03:20:36 pm 
Started by dangdog - Last post by dangdog
Greetings All -

I have noticed airodump will continue to report a station being seen by way of the column, time last seen, even when that station is no longer present.  I have read the documentation that this can occur due to the access point attempting to communicate with the no longer present device but that the PWR signal reported should be -1.

In my case I start out with a device present and detected with the time last seen as the current time and the PWR signal level fluctuating but then when the device leaves out of range or is turned off it will still be reporting time last seen as the current time and the PWR signal level will continue to report the last known signal level, it will not change the PWR signal level to -1.

A quick stop/start of airodump-ng will report the PWR signal as -1.

If you might have an answer to how I can get the PWR signal to update to -1 without having to restart airodump-ng I would appreciate your help.

Pages: 1 ... 8 9 [10]