VM does not capture WiFI in Monitor Mode with USB adaptor

asked 2021-04-16 15:32:48 +0000

updated 2021-04-16 15:51:49 +0000

grahamb gravatar image

Hi

I am Useing the following setup to Capture in Monitor Mode:

Dell Inspiron 3585 Alfa AWUS036NEH

Host: Windows 10 Build 19042.928 VirtualBox 6.1.18

Guest: Kali 2021.1

I can see my USB WiFi in Kali with lsusb:

Bus 001 Device 002: ID 148f:3070 Ralink Technology, Corp. RT2870/RT3070 Wireless Adapter

then i put in into Monitor Mode:

sudo airmon-ng check  
sudo airmon-ng check kill  
sudo airmon-ng start wlan0

PHY     Interface       Driver          Chipset

phy0    wlan0           rt2800usb       Ralink Technology, Corp. RT2870/RT3070  
                (mac80211 monitor mode vif enabled for [phy0]wlan0 on [phy0]wlan0mon)  
                (mac80211 station mode vif disabled for [phy0]wlan0)

but wireshark does not capture any Packets on Interface wlan0mon (Channel 1)

When i restart an put the Device in Monitor mode using iwconfig i get the same result.

btw. I can capture Packets with my Hostsystem on Channel 1

Can anybody give me a Hint what to try next?

Thx in advance SpeakerSeeker

edit retag flag offensive close merge delete

Comments

Presumably you're following instructions such as here.

Are you sure your adaptor is supported, e.g. see here?

grahamb gravatar imagegrahamb ( 2021-04-16 15:50:31 +0000 )edit

Thanks grahamb

I did not read the contents of the first link before you posted it(but what they are doing is what i have done since it was the obvious way to do it in my opinion)

i have reason to beleve that the Adapter is supported:

  • works on my windows host(npcap)
  • in Kali it uses the rt2800usb driver, wireless wiki list monitor mode support for it
SpeakerSeeker gravatar imageSpeakerSeeker ( 2021-04-16 16:35:21 +0000 )edit

btw. I can capture Packets with my Hostsystem on Channel 1

So presumably you're trying to capture on channel 1 on the Kali guest as well?

Guy Harris gravatar imageGuy Harris ( 2021-04-18 07:36:53 +0000 )edit

Yeah i try Capturing on Channel 1 as well

I just used the Host to confirm that the Adapter works and there is traffic on Channel 1.

Of course not at the same time, the adapter is not avaliable for the host as soon as VirtualBox uses it for the VM.

SpeakerSeeker gravatar imageSpeakerSeeker ( 2021-04-19 13:06:04 +0000 )edit

The problem seems to be in wireshark settings , the adapter you are using is fully supported in kali Linux as shown here https://kalitut.com/usb-wi-fi-adapter... , and it's working in monitor mode as you showed , what you must do now is check what adapter wireshark is using

thexwts gravatar imagethexwts ( 2021-06-18 21:24:41 +0000 )edit