Return-path: Received: from mail-la0-f53.google.com ([209.85.215.53]:33089 "EHLO mail-la0-f53.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1751388AbbESRlj (ORCPT ); Tue, 19 May 2015 13:41:39 -0400 Received: by lagr1 with SMTP id r1so35681490lag.0 for ; Tue, 19 May 2015 10:41:37 -0700 (PDT) MIME-Version: 1.0 In-Reply-To: References: Date: Tue, 19 May 2015 20:41:37 +0300 Message-ID: (sfid-20150519_194142_742602_EE154606) Subject: Re: Failed to capture data packets using Monitor mode with Intel 7260 card. (Under Ubuntu 14.04) From: Emmanuel Grumbach To: darklight wu Cc: linux-wireless Content-Type: text/plain; charset=UTF-8 Sender: linux-wireless-owner@vger.kernel.org List-ID: On Tue, May 19, 2015 at 7:44 PM, darklight wu wrote: > On Mon, May 18, 2015 at 3:26 PM, Emmanuel Grumbach wrote: >> On Mon, May 18, 2015 at 10:01 AM, darklight wu wrote: >>> Hi, All: >>> >>> I configured the Wifi Monitor mode with Intel 7260 card under >>> Ubuntu14.04 and then used Wireshark to capture packets from air. But I >>> could only get management/control packets but no data packets. I tried >>> different channels and also with HT20 or HT40+/-. >>> >>> The commands I used were: >>> >>> iw dev wlan0 interface add mon0 type monitor >>> iw dev wlan0 del //I googled and was told I needed to delete the >>> wlan0 first. Or else I got device busy (-16) error >>> ifconfig mon0 up >>> iw dev mon0 set channel 1 >>> >>> I also tried to use other ways like "airmon-ng start wlan0". All the >>> observations were same, no data packets. It's weird! Anyone has a >>> clue? >>> >> >> This is weird. But I recommend to add power_scheme=1 as a module >> parameter to iwlmvm. Since iwlmvm is loaded automatically, you'll need >> to add that to /etc/modprobe.d/iwlwifi.conf. >> 14.04 ships 3.13 and I remember we had issues with monitor mode at >> that time. You may want to try a newer kernel. > > I tried again today with "power_scheme=1" and also booted with Ubuntu > 15.04. Both still failed to work in monitor mode. And with Ubuntu > 15.04, I event could not configure the nic to work on monitor mode. > The same commands at least can set the monitor mode under 14.04. > Meanwhile, I just want to clarify, the nic could capture data packets > to/from itself but could not capture others that were not belongs to > it. My co-worker tried on another machine with Ubuntu 14.04, he was > also failed. > > Any tricks here? You must not have any interface besides the monitor interface. I bet you still have the wpa_supplicant running and this is why you only have a virtual monitor interface that catches the packet from your managed interface only.