Products > Networking & Wireless

How do I set my wifi adapter to monitor mode in Windows?

(1/1)

Ben321:
In WireShark software there's promiscuous mode, which lets you monitor all packets on the currently connected wireless network (rather than just those intended for your computer). But there's another mode also that some cards support, but others don't it seems (and mine might not it seems), and this mode is called monitor mode. In this mode, it a network card receives all wi-fi packets, not just those associated with the currently connected network (and I don't even think that a network card can connect to a network the standard way when in monitor mode). However, I don't think most cards support monitor mode (at least not in Windows, but I heard that it's easier to do in Linux).

Now here's what I'm not completely sure about, regarding monitor mode in Windows (and yes, I've heard that it is possible). I have NPCap installed (equivalent to WinPCap, but for Windows 10 that doesn't support the WinPCap driver), and I know it supports promiscuous mode, but I don't know if it is capable of enabling monitor mode in wifi adapters that support monitor mode, or if I need to install a special hacked driver for that specific wifi adapter to replace its normal driver in order to enable monitor mode.

And one more thing. How do I know if my wifi adapter is even capable of running in monitor mode? Is there some simple software I can run that query's a wifi adapter's capabilities, and then reports if it supports monitor mode?

gmb42:
The Wireshark Wiki page on WLAN Capturing is a good resource on the general issues of WiFi capture.

For npcap in particular, the user guide has this section dealing with monitor mode.

The nmap folks maintain a list of adaptors of WiFi adaptors tested with npcap and their capabilities.

Ben321:

--- Quote from: gmb42 on July 06, 2019, 02:06:48 pm ---The Wireshark Wiki page on WLAN Capturing is a good resource on the general issues of WiFi capture.

For npcap in particular, the user guide has this section dealing with monitor mode.

The nmap folks maintain a list of adaptors of WiFi adaptors tested with npcap and their capabilities.

--- End quote ---

Will I also need to do something like install a hacked version of Windows' normal ethernet driver, or somehow upload a hacked firmware to the network card itself?

gmb42:
If it's on the npcap list, then no (apart from the Alfa AWUS036NHA (Atheros AR9271)).

If it's not on the list, then there might be some options with drivers\firmware to enable it, but you're clutching at straws.

Linux generally has better support.

Navigation

[0] Message Index