Tell me more ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.
up vote 0 down vote favorite

I try to do arp-poisoning on my wireless network using ethercap (same method as using on wired). It make the victim network unusable rather than forward packet to attacker computer. Why ?

share|improve this question
Now I find the solution. Put the NIC to monitor mode. Then I see all the packets in the air. – Isara Rungvitayakul Jul 18 '11 at 15:27
So the correct way to sniff in wireless is to put NIC into monitor mode and use wireshark or kismet to view the packet. – Isara Rungvitayakul Jul 27 '11 at 18:44

1 Answer

up vote 1 down vote accepted

The ARP protocol uses brodcasts. WLAN will transfer these at it lowest speed - so that all stations can receive them - usually at 1 MBps. As a result the channel will simply be jammed with a relatively low amount of packets send per second. But ettercap need to send a reletively high amount of packets to do its work.

In conclusion, it may simply jam the channel.

share|improve this answer
Thank you very much Turbo J. – Isara Rungvitayakul Jun 29 '11 at 17:25

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.