Ethereal and hostAP

Brian Sturgill zen_hacker
Wed Sep 8 17:38:02 PDT 2004

In monitor mode you are not associated to an AP so no mac address shows in 
iwconfig. You are not participating in a network. It is just listening for 
wireless packets.


>From: "tanuja ingale" <tanuja_iv at>
>To: hostap at
>Subject: Ethereal and hostAP
>Date: Thu, 09 Sep 2004 05:50:13 +0530
>I used Ethereal with the Dlink DWL 650 card in monitor mode 2. This brings 
>down my wlan0 interface. As in, it shows
>wlan0     IEEE 802.11b  ESSID:"cuairnet"
>          Mode:Monitor  Frequency:2.422GHz  Access Point: 00:00:00:00:00:00
>          Bit Rate:1Mb/s   Sensitivity=1/0
>          Retry min limit:8   RTS thr=2312 B   Fragment thr:off
>          Encryption key:off
>          Power Management:off
>          Link Quality:53/0  Signal level:-38 dBm  Noise level:-92 dBm
>          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
>          Tx excessive retries:9  Invalid misc:3177   Missed beacon:0
>When I disable the monitor mode, the iwconfig shows the valid AP address.
>Can anyone tell me where I may have gone wrong?
>>Ethereal does not need any special configuration for operation with Host 
>>AP driver. You just need to >get recent enough versions of libpcap and 
>>Ethereal so that they have support for 802.11 frames (I >use CVS versions) 
>>and then you should be able to capture frames with 802.11 headers from 
>>wlan0 >when using monitor mode 2 (or 3 in CVS version to get some extra 
>>Prism2 info). You will also need to >set wlan0 interface UP for the 
>>Jouni Malinen                                            PGP id EFC895FA
>1 Paisa No Reserve Auctions.  
> T-Shirts, 
>Shirts, Kurtas, Apparels.
>HostAP mailing list
>HostAP at

More information about the Hostap mailing list