Cannot find any devices

[ghost]

I've tried this with two machines now and I cannot find any devices with either. Is there some way to check if the wifi devices support monitor mode?

I already did this:
From iw phy:
[...]
Supported interface modes:

• IBSS
• managed
• AP
• AP/VLAN
• monitor
  [...]

So, something more than just the output of iw would be good.

[schollz]

@gutsle Something similar happend with me, while my card says "monitor" is available, and I can run tshark, I get no output from tshark. I would try that as a method to see if really supports monitor mode.

That is:

tshark -I -i wlan0 -a duration:15 -w /tmp/tshark-temp
tshark -r /tmp/tshark-temp -T fields -e wlan.sa -e wlan.bssid

That output will not be empty if your card really supports monitor mode. Also change wlan0 to your interface.

[ghost]

The output is empty but the file has 2.4 K. I'm not sure how to interpret that.

[ATSiem]

@gutsle @schollz

I have the same issue - with a TN722N plugged into my Raspberry Pi Zero.

I have three adapters visible in 'howmanypeoplearearound':

• lo (Local)
• wlan0 (Onboard Wifi)
• wlan1 (TN722N)

I confirmed in iwconfig that:

• wlan0 is running 'managed' mode with a successful internet connection and IP,
• wlan1 is running 'monitor' mode.
  NOTE: wlan0 shows SSIDs and signal strengths in the wifi selector panel in the Raspbian GUI, wlan1 shows the SSIDS with greyed out signal strengths.

When I scan with wlan1 for 300 seconds - with an Apple iPhone SE several feet away searching for Wireless Networks - I get the result:

"Found no signals, are you sure wlan1 supports monitor mode?"

When I execute:

tshark -I -i wlan0 -a duration:15 -w /tmp/shark-temp

The result is:

"Capturing on 'wlan1'
tshark: The capture session could not be initiated on interface 'waln1' (That device doesn't support monitor mode)."

When I execute:

iw list

The result is:

Wiphy phy1
...
Supported interface modes:

• monitor

What should I troubleshoot/configure next? It seems howmanypeoplearearound and the recommended wifi adapter supporting monitor mode are configured properly.

PRIOR TO THIS BLOCK, I struggled to install the drivers on Raspbian for my TN722N...

An easy way to install your wifi adapter drivers is to use MrEngMan's install-wifi script which determines the wifi adapter you use and the kernel version you have and then should automatically download and install the right version of the driver - especially for most Realtek drivers. You can download and install the script using the following commands:

sudo wget http://fars-robotics.net/install-wifi -O /usr/bin/install-wifi

sudo chmod +x /usr/bin/install-wifi

sudo install-wifi

via https://www.raspberrypi.org/forums/viewtopic.php?f=46&t=178205

[ATSiem]

@gutsle Can you share your output from Wireshark?

I'm going to review my specific failure with Wireshark further. That seems to be the root of the issue.

[ATSiem]

@gutsle @schollz

I'm still stuck on Wireshark - combing those forums.

My primary error is:

mode: Host name lookup failure

when I run the command:

'sudo ifconfig wlan1 mode monitor'

Thoughts on why that is happening?

[schollz]

@adamsiem When did you buy your TN722N? The newer ones don't appear to support monitor mode :(

[hectorgabucio]

@adamsiem your Pi Zero has onboard wifi? Is the Pi Zero W right?
Try this image
https://whitedome.com.au/re4son/re4son-kernel/

It has nexmon patch, so you don't need the wifi dongle, you can use the onboard wifi in monitor mode on RPI3/RPI Zero W.
Steps:

• Download the image for Pi Zero W -> https://whitedome.com.au/re4son/download/kali-linux-armel-re4son/
• Flash the image in sd card
• That's it. If you want monitor mode, write in terminal
  nexutil -m2
• And then run howmanypeoplearearound.
• To turn off monitor mode
  nexutil -m0

I have this image in my RPI 3 and it works like a charm with howmanypeoplearearound (I couldn't manage to install docker thought).

Hope this info is helpful!

[tomtom215]

Noticing the same behavior with recently acquired t722. Was able to install aircrack-ng suite and run airmon-ng and it enabled wlan0mon on the t722.

Even when that was active, I tried howmanypeoplearearound (with and without sudo), stopped airmon but the mon interface was still up and showed as busy.

Seems like the adapter is fine but there's something up with howmanypeoplearearound forcing it into monitor mode correctly?

I'd prefer not to go with custom images or reflashing to kali :/

(RP3 with all drivers, packages up to date, and upgrades applied)

[ikeyany]

@gutsle You need to first create the monitor mode interface with

$ iw phy wlan0 interface add mon1 type monitor

and then actually turn it on with:

$ ifconfig mon1 up

[sulrich70]

$ iw phy wlan0 interface add mon1 type monitor

I get

command failed: No such file or directory (-2)