I am studying some network security and have two questions:

  1. The WinPCap library that Wireshark (for Windows) is using requires that the network card can be set into promiscuous mode to be able to capture all packets "in the air". I have understood that not many network cards can be set into that mode in Windows. So is it uncommon to use Wireshark for Windows to capture wifi packets?

  2. So to the next question: The famous tool Firesheep also uses WinPCap. When Firesheep was released, all newspapers worldwide said it was so easy to hijack HTTP sessions, but you still need a network card that supports promiscuous mode in Windows, which is uncommon, right?

  3. My wifi adapter is an Atheros AR5007, can it be set in promiscuous mode in Windows? How about Linux?

asked 31 Dec '10, 05:40

Rox's gravatar image

Rox
217810
accept rate: 0%

edited 31 Dec '10, 06:17


Most windows wifi NICs cannot be used to capture in promiscuous mode. Most Windows wired NICs can be set to promiscuous mode. No clue on your Atheros chipset - sorry.

link

answered 31 Dec '10, 07:54

hansangb's gravatar image

hansangb
7662619
accept rate: 10%

Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "Title")
  • image?![alt text](/path/img.jpg "Title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Tags:

×160
×27
×20

Asked: 31 Dec '10, 05:40

Seen: 8,555 times

Last updated: 31 Dec '10, 07:54

powered by OSQA