Ask Your Question
0

I get the error "unable to set channel or offset". I want to check permissions, but the directory .config/wireshark is empty. What do I have to do?

asked 2023-07-21 15:14:29 +0000

gabri gravatar image

updated 2023-07-28 13:48:18 +0000

I'm running Linux 18.04 on virtual machine with Oracle VM. My purpose os to be able to change the monitored channel in Monitor Mode, because I see that it changes from capture to capture. Thanks.

Thanks Bob and Guy to try helping me! Here are the additional info requested: The host system is a PC running Windows 10. On top of it I've installed Oracle VM 7.0. The linux distribution is Ubuntu 18.04. I've installed Wireshark on Ubuntu from the repository wireshark-dev/stable. The purpose of this exercise is to sniffer in monitor mode on wifi 802.11 the behavior of different smartphones, specifically how they send the "Probe Request" messages according to various conditions (display active/inactive, wifi connected/non connected, power save on/off). To do this sniffing I was told to buy the D-Link wireless N nano USB adapter and to configure it on Ubuntu. I installed it taking the drivers from the repository kelebek333/kablosuz (I got his info by looking at other chats on the topic). So I confirm that the WiFi adapter is connected to the guest machine. Then I have to enable monitor mode, following the following procedure (for simplicity "wlan0" stands for the name of my interface): - ifconfig "wlan0" down
- airmon-ng check kill
- iwconfig "wlan0" mode monitor
..... here I usually get an error, but as found on the chat I have to ifconfig "wlano0" up and then retry all the commands until they are OK. I check that the interface is in monitor mode by running iwconfig.

At this point I run wireshark (on the guest) it works, but I can not specify the channel on which to do the sniffing (the display always says "channel 1"). But I've noticed, looking into the IEEE802.11 radio information section, that the channel is not always 1: sometimes it it 11 and when this happens I get many more records in my sniffing file. It seems that the actual channel selection (the one shown in the radio information section) is done randomly. My question is: is there a way in which I can tell wireshark the channel on which doing the sniffing ? (So far I just saw channel 1 or 11, never seen channel 6). Thanks again for any suggenstion you may give me.

Hi Bob, yes I've tried to use airmon-ng start "wlan0", and I don't know how, but this command hangs forever. I don't have the prompt back and I have to close the monitor window. That's why I moved to the iwconfig command instead. Sorry for the confusion, you are right: I installed Oracle Virtualbox on Windows 10 and I have Ubuntu distro as VM. Then I installed wireshark on Ubuntu. Thanks again!

Hi Guy, the only adapter I'm using on Ubuntu VM is the D-Link wireless N nano USB adapter (8192eu). I read that in order to configure a USB device on an Oracle VM the procedure is ... (more)

edit retag flag offensive close merge delete

Comments

I'm running Linux 18.04 on virtual machine with Oracle VM.

So version 18.04 of some Linux distribution is the guest machine on Oracle VM? If so, what distribution is it, and what is the host operating system (the OS on which Oracle VM is running)?

And presumably Wireshark is running on the guest machine, right?

I get the error "unable to set channel or offset".

Is the Wi-Fi adapter attached to the guest machine? It's presumably an adapter on the host machine, but, at least with VMware Fusion on macOS, if you plug a USB device in to the host, Fusion asks whether it should be connected to the host or one of the guests.

Guy Harris gravatar imageGuy Harris ( 2023-07-27 01:15:15 +0000 )edit

If you read the docs for airmon-ng, you can check kill to stop interfering processes and also use it to start the interface in monitor mode on a channel. I would suggest this approach.

On top of it I've installed Oracle VM 7.0. The linux distribution is Ubuntu 18.04

This is a little confusing - I think you installed VirtualBox and have Ubuntu distro as a VM. Oracle makes a Linux distribution, too.

Bob Jones gravatar imageBob Jones ( 2023-07-27 14:59:01 +0000 )edit

Sorry for the confusion, you are right: I installed Oracle Virtualbox on Windows 10 and I have Ubuntu distro as VM. Then I installed wireshark on Ubuntu.

So what are the adapters on the Ubuntu VM? And do you have any USB adapters plugged into the Windows machine that Oracle VM assigned to the guest machine? If so, is wlan0 one of those?

Guy Harris gravatar imageGuy Harris ( 2023-07-28 07:12:37 +0000 )edit

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-07-24 19:55:00 +0000

Bob Jones gravatar image

Passing adapters through to VMs can work sometimes, but is often problematic. From a production point of view, I would avoid this.

If you are able to make it work, i.e. VM sees adapter, then you might just have a configuration issue. You can, of course, manually configure the system but the aircrack-ng suite has a tool to help you configure the adapter and disable all other known-conflicting applications. Start by using the airmon-ng tool and you can set the channel. Further channel changes can be done with iw, iwconfig, or even some older versions of Wireshark, but it is important to be sure all interfering software is disabled.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2023-07-21 15:14:29 +0000

Seen: 695 times

Last updated: Jul 28 '23