Results 1 to 9 of 9

Thread: Will airodump-ng "miss" data?

  1. #1
    Just burned his ISO
    Join Date
    Jun 2010
    Posts
    24

    Default Will airodump-ng "miss" data?

    If I ran airodump-ng such that it monitored all channels, would I potentially stand to lose data compared to if I were to run it monitoring one fixed channel? What about if I specify just one bssid? Is there a trade off between completeness and breadth?

  2. #2
    Just burned his ISO
    Join Date
    Sep 2010
    Location
    Northwest England
    Posts
    22

    Default Re: Will airodump-ng "miss" data?

    Quote Originally Posted by chaohacker View Post
    If I ran airodump-ng such that it monitored all channels, would I potentially stand to lose data compared to if I were to run it monitoring one fixed channel? What about if I specify just one bssid? Is there a trade off between completeness and breadth?
    Firstly I am by no means any sort of expert but by definition channel hopping will cause you to not be on your desired channel at all times so you will not be able capture all data and i think it will take you longer to obtain the four way handshake..

    just my thoughts,

    B.
    Always learning....

  3. #3
    My life is this forum Barry's Avatar
    Join Date
    Jan 2010
    Posts
    3,817

    Default Re: Will airodump-ng "miss" data?

    Yes, it will miss data on channels other than what it's scanning at the moment. If you're locked onto one channel you could still miss data if your card can't keep up, or there are more than one network running on that channel.
    Of course, if you really wanted to have some fun, go to Wal-Mart late at night and ask the greeter if they could help you find trashbags, roll of carpet, rope, quicklime, clorox and a shovel. See if they give you any strange looks. --Streaker69

  4. #4
    Just burned his ISO
    Join Date
    Jun 2010
    Posts
    24

    Default Re: Will airodump-ng "miss" data?

    Quote Originally Posted by Barry View Post
    Yes, it will miss data on channels other than what it's scanning at the moment. If you're locked onto one channel you could still miss data if your card can't keep up, or there are more than one network running on that channel.
    Okay, so if I want to monitor a specific network, will specifying both the channel and the bssid be enough? Is there anything else I can do?

    What are the ramifications (in regards to performance) of specifying the channel ahead of time with airmon? Is one not needed if the other is used?
    Last edited by chaohacker; 09-09-2010 at 05:10 PM.

  5. #5
    Very good friend of the forum TAPE's Avatar
    Join Date
    Jan 2010
    Location
    Europe
    Posts
    599

    Default Re: Will airodump-ng "miss" data?

    I always feel that if you have all the information on the test AP, why not use it and focus as much as you can, so ;

    Code:
    airodump-ng mon0 -c 1 -t wpa -d 00:11:22:33:44:55 -a
    You sometimes need to specify the channel when statring the interface with airmon to ensure that it does
    not start hopping in airodump, (even when the -c option is used. it does sometimes hop)
    Only really need to do that when you start the attack on the AP though IMO.

  6. #6
    Just burned his ISO
    Join Date
    Sep 2010
    Location
    Northwest England
    Posts
    22

    Default Re: Will airodump-ng "miss" data?

    Quote Originally Posted by TAPE View Post
    I always feel that if you have all the information on the test AP, why not use it and focus as much as you can, so ;

    Code:
    airodump-ng mon0 -c 1 -t wpa -d 00:11:22:33:44:55 -a
    You sometimes need to specify the channel when statring the interface with airmon to ensure that it does
    not start hopping in airodump, (even when the -c option is used. it does sometimes hop)
    Only really need to do that when you start the attack on the AP though IMO.
    I personally Always specify the channel I am scanning and I am very glad that it is a known issue that it does sometimes still hop...
    that has put my mind at rest

    As always thanks guys I learn something on every visit!

    B.
    Always learning....

  7. #7
    Member
    Join Date
    Dec 2007
    Location
    The Netherlands
    Posts
    267

    Default Re: Will airodump-ng "miss" data?

    Aside from what you mentioned, it of course also depends on your card, and your perhaps your processor (I don't know if the card drops the irrelevant packets, or the computer's processor, but my bet is on the latter).

  8. #8
    Just burned his ISO
    Join Date
    Jun 2010
    Posts
    24

    Default Re: Will airodump-ng "miss" data?

    Thank you all for the replies. Very useful information.

    Quote Originally Posted by TAPE View Post
    You sometimes need to specify the channel when statring the interface with airmon to ensure that it does
    not start hopping in airodump, (even when the -c option is used. it does sometimes hop)
    When this bug occurs, will airodump display that it's hopping channels, or does it only display the designated channel and hop behind the scenes?

  9. #9
    Very good friend of the forum TAPE's Avatar
    Join Date
    Jan 2010
    Location
    Europe
    Posts
    599

    Default Re: Will airodump-ng "miss" data?

    Well I have on occasion seen that it is fixing on a different channel from what is specified in airodump.
    When starting the interface with airmon-ng specifying the channel it doesnt.

Similar Threads

  1. Replies: 4
    Last Post: 02-24-2011, 04:52 PM
  2. Capturing "#Data" packets too slow, a way to speed up?
    By TheChemist187 in forum OLD Newbie Area
    Replies: 6
    Last Post: 04-20-2009, 02:21 AM
  3. BT3 USB "Data not found" + Aireplay error.
    By v12v12 in forum OLD Newbie Area
    Replies: 6
    Last Post: 02-25-2009, 04:21 PM
  4. Replies: 1
    Last Post: 01-14-2009, 12:32 AM
  5. Replies: 13
    Last Post: 10-06-2008, 11:18 PM

Tags for this Thread

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •