This is easier and more effective than packet sniffing on a wired network:
- Stop Network Manager:
/etc/init.d/network-manager stop
- Set your WiFi card into monitoring mode:
airmon-ng start wlan0
- See what’s around:
airodump-ng mon0
- Select a target network, and note the BSSID value and channel (used as ‘
-c
‘ option below) - Collect the packet trace:
airodump-ng -c 6 --bssid 00:12:34:56:78:90 -w output-file mon0
- Examine packet trace:
wireshare output-file.cap
(run on Debian Wheezy [testing] using Intel Corporation Centrino Wireless-N 1000)