just my thoughts,
If I ran airodump-ng such that it monitored all channels, would I potentially stand to lose data compared to if I were to run it monitoring one fixed channel? What about if I specify just one bssid? Is there a trade off between completeness and breadth?
just my thoughts,
Yes, it will miss data on channels other than what it's scanning at the moment. If you're locked onto one channel you could still miss data if your card can't keep up, or there are more than one network running on that channel.
Of course, if you really wanted to have some fun, go to Wal-Mart late at night and ask the greeter if they could help you find trashbags, roll of carpet, rope, quicklime, clorox and a shovel. See if they give you any strange looks. --Streaker69
What are the ramifications (in regards to performance) of specifying the channel ahead of time with airmon? Is one not needed if the other is used?
Last edited by chaohacker; 09-09-2010 at 05:10 PM.
I always feel that if you have all the information on the test AP, why not use it and focus as much as you can, so ;
You sometimes need to specify the channel when statring the interface with airmon to ensure that it doesCode:airodump-ng mon0 -c 1 -t wpa -d 00:11:22:33:44:55 -a
not start hopping in airodump, (even when the -c option is used. it does sometimes hop)
Only really need to do that when you start the attack on the AP though IMO.
Aside from what you mentioned, it of course also depends on your card, and your perhaps your processor (I don't know if the card drops the irrelevant packets, or the computer's processor, but my bet is on the latter).
Well I have on occasion seen that it is fixing on a different channel from what is specified in airodump.
When starting the interface with airmon-ng specifying the channel it doesnt.