Thursday, 6 August 2015

Promiscuous vs monitor mode of a wireless network interface


Wireless adapter in promiscuous mode:
  • connected to the Access Point (AP)
  • SSID filtering is switched on => it can receive packets only from AP it is associated with (it receives radio packets from all APs but forwards to the upper layers only those from that particular AP)
  • MAC filtering is switched off => it can receive packets destined for any MAC address
  • it can't decrypt packets to/from other nodes in secured (WEP, WPA...) networks 
  • it translates Wi-Fi data frames into wired Ethernet-style frames (IEEE 802.3) so they look like Ethernet frames captured on the LAN interface working in promiscuous mode

Wireless adapter in monitor mode:
  • usually NOT connected to the Access Point (depends on the adapter and its driver) => it does not transmit any packets
  • SSID filtering is switched off => it can receive packets from any AP within its range
  • MAC filtering is switched off => it can receive packets destined for any MAC address
  • it can decrypt packets to/from other nodes in secured networks

It is worth adding the following:
  • monitor mode does not make sense (and so does not exist) for LAN cards 
  • all LAN cards support promiscuous mode
  • not all Wi-Fi cards support promiscuous and monitor mode

Further reading:Promiscuous mode (Wikipedia)
Monitor mode (Wikipedia)
Wireshark - WLAN (IEEE 802.11) capture setup

2 comments:

hajikhatri said...

I have bookmarked your website because this site contains valuable information in it. I am really happy with articles quality and presentation. Thanks a lot for keeping great stuff. I am very much thankful for this site. instagram profile

micheal pan said...

BE SMART AND BECOME RICH IN LESS THAN 3DAYS....It all depends on how fast 
you can be to get the new PROGRAMMED blank ATM card that is capable of
hacking into any ATM machine,anywhere in the world. I got to know about 
this BLANK ATM CARD when I was searching for job online about a month 
ago..It has really changed my life for good and now I can say I'm rich and 
I can never be poor again. The least money I get in a day with it is about 
$50,000.(fifty thousand USD) Every now and then I keeping pumping money 
into my account. Though is illegal,there is no risk of being caught 
,because it has been programmed in such a way that it is not traceable,it 
also has a technique that makes it impossible for the CCTVs to detect 
you..For details on how to get yours today, email the hackers on : (
atmmachinehackers1@gmail.com ). Tell your 
loved once too, and start to live large. That's the simple testimony of how 
my life changed for good...Love you all ...the email address again is ;
atmmachinehackers1@gmail.com