Arch Linux

acidvegas

Member

From: Olympia, Greece

Registered: 2016-11-09

Posts: 5

Website

[Wireshark] Monitor Mode check box keeps unchecking itself

I am using the Panda PAU06 WiFi dongle (https://www.amazon.com/Panda-Wireless-P … B00JDVRCI0) with my laptop:

> ~ : lsusb

Bus 001 Device 005: ID 148f:5372 Ralink Technology, Corp. RT5372 Wireless Adapter

My onboard wifi chip doesnt support monitor mode & packet injection, so I disabled it with:

modprobe -r ath9k

echo "install ath9k /bin/false" > /etc/modprobe.d/blacklist.conf

My dongle works now and can connect to wifi and has the interface name wlp0s18u1u4. The problem is, when I enter monitor mode with:

> ~ : sudo airmon-ng check kill

Killing these processes:

PID Name

322 dhcpcd

390 wpa_supplicant

> ~ : sudo airmon-ng start wlp0s18u1u4

PHY Interface Driver Chipset

phy1 wlp0s18u1u4 rt2800usb Ralink Technology, Corp. RT5372

(mac80211 monitor mode vif enabled for [phy1]wlp0s18u1u4 on [phy1]wlp0s18u1u4mon)

(mac80211 station mode vif disabled for [phy1]wlp0s18u1u4)1

iwconfig reports the following:

> ~ : iwconfig

lo no wireless extensions.

wlp0s18u1u4mon IEEE 802.11 Mode:Monitor Frequency:2.457 GHz Tx-Power=30 dBm

Retry short long limit:2 RTS thr:off Fragment thr:off

Power Management:off

So I am in monitor mode. Anytime I open wireshark and check monitor mode, itll uncheck itself.

I tried:

sudo ifconfig wlp0s18u1u4 down

sudo iwconfig wlp0s18u1u4 channel 11

sudo iwconfig wlp0s18u1u4 mode monitor

sudo ifconfig wlp0s18u1u4 up

and starting it with airmon-ng, also same issue. What am i doing wrong?
added my user to the wireshark group btw

Last edited by acidvegas (2019-02-04 03:39:58)

---

MOST DANGEROUS MOTHERFUCK
Github • SuperNETs