 | 1 | initial version |
Is there any way to use internet during capture monitor mode without using Wireshark?
If you're using tcpdump, run it with the -I (capital-I) flag.
If you're using dumpcap, run it with the -I (capital-I) flag.
If you're using TShark, run it with the -I (capital-I) flag.
All of those do the same thing that Wireshark does if you enable monitor mode when capturing.
| | 2 | No.2 Revision |
Is there any way to use internet during capture monitor mode without using Wireshark?
If you're using tcpdump, run it with the -I (capital-I) flag.
If you're using dumpcap, run it with the -I (capital-I) flag.
If you're using TShark, run it with the -I (capital-I) flag.
All of those do the same thing that Wireshark does if you enable monitor mode when capturing.
And, if you're doing capturing yourself, with a program using libpcap, you need to open the capture device using pcap_create() and pcap_activate(), rather than using pcap_open_live(), and call pcap_set_rfmon() on the pcap_t, with the second argument being 1, between calling pcap_create() and pcap_activate().
