I cant seem to ever see clients in Airdump-ng or Kissmet

[Rochdalemark]

Hi.

I have a Compaq Presario CQ60l aptop that Ive installed Kali on (no running from live). The built in wifi card appears to be: Qualcomm Atheros AR242x / AR542x Wireless Network Adapter (PCI-Express).

I have tried to run airdump and kissmet and although it seems to tell me the card is in monitor mode, it never seems to find a client.

Im testing on my home network which is PSK WPA2.

Ive used other devices such as my mobile to log in and out of the wifi network numerous times, but I never seem to detect anything.

I'm doing the following.

airmon-ng
airmon-ng check kill
airmon-ng start wlan0
airodump-ng wlan0mon

Once it displays a list including my network I press CTR + C

I copy my bssid and channel and do the following

airodump-ng -c 4 --bssid [mybssid] -w /root/Desktop/ wlan0mon

It then just sits there monitoring, but never detects a client bssid.

Im probably doing something really stupid, but dont know what.

Any help would be appreciated.

[grid]

Looks like you are locking airodump-ng to channel 4...silly question, but is your access point operating on channel 4? I'd also be certain that your wireless device really is wlan0. My external wi-fi cards often jump between wlan1 & wlan2. Another thing to try is an injection test using aireplay-ng. The aircrack-ng suite works best when your wi-fi card is fully compatible: that is, it will go into monitor mode & do packet injection.

[Cryptic-F]

Hey Rochdalemark,

Please run "airmon-ng start wlan0" and post the results here.

[frank082]

hi guys, i've the similar problem, with one difference.. .. running airodumpo-ng on wlan0mon, i see all networks captable, but there is no one client...before upgrading was working fine... can you help me please?

i show more :

cat /etc/*{release,version}
DISTRIB_ID=Kali
DISTRIB_RELEASE=kali-rolling
DISTRIB_CODENAME=kali-rolling
DISTRIB_DESCRIPTION="Kali GNU/Linux Rolling"
PRETTY_NAME="Kali GNU/Linux Rolling"
NAME="Kali GNU/Linux"
ID=kali
VERSION="2016.1"
VERSION_ID="2016.1"
ID_LIKE=debian
ANSI_COLOR="1;31"
HOME_URL="http://www.kali.org/"
SUPPORT_URL="http://forums.kali.org/"
BUG_REPORT_URL="http://bugs.kali.org/"
Kali Linux Rolling
cat: /etc/subversion: È una directory


lspci | grep Ather
02:00.0 Ethernet controller: Qualcomm Atheros AR242x / AR542x Wireless Network Adapter (PCI-Express) (rev 01)



root@Asgard:~# dmesg | grep ath5k
[ 11.829852] ath5k 0000:02:00.0: can't disable ASPM; OS doesn't have ASPM control
[ 11.830029] ath5k 0000:02:00.0: registered as 'phy0'
[ 12.396437] ath5k: phy0: Atheros AR2425 chip found (MAC: 0xe2, PHY: 0x70)
[ 236.003411] ath5k: ath5k_hw_get_isr: ISR: 0x00000080 IMR: 0x00000000
[15988.004967] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[23068.005332] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[24268.005022] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[26428.004913] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[26908.004633] ath5k: ath5k_hw_get_isr: ISR: 0x00000080 IMR: 0x00000000
[31828.004523] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[32428.004737] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[35068.005301] ath5k: ath5k_hw_get_isr: ISR: 0x00000080 IMR: 0x00000000
[36268.001901] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[36628.005114] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[36988.003952] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[38428.004650] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[41788.003324] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[42028.004905] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[42148.005186] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[42628.004856] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[49588.005008] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[50788.004766] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[51629.884057] ath5k: ath5k_hw_get_isr: ISR: 0x00000001 IMR: 0x00000000
[53068.004539] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[54991.400078] ath5k: ath5k_hw_get_isr: ISR: 0x00000004 IMR: 0x00000000
[59548.004532] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[60868.004943] ath5k: ath5k_hw_get_isr: ISR: 0x00000080 IMR: 0x00000000
[63028.005078] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000
[68788.004855] ath5k: ath5k_hw_get_isr: ISR: 0x00000080 IMR: 0x00000000
[70588.005256] ath5k: ath5k_hw_get_isr: ISR: 0x00000400 IMR: 0x00000000


i've alot of time to remove module ath5k and reinstall it with a lot of option, but nothing change.



root@Asgard:~# iwconfig
wlan0 IEEE 802.11bg ESSID:"HighWay"
Mode:Managed Frequency:2.462 GHz Access Point: C4:EA:1D:BC:5F:A7
Bit Rate=54 Mb/s Tx-Power=20 dBm
Retry short limit:7 RTS thr:off Fragment thr:off
Encryption key:off
Power Management:off
Link Quality=51/70 Signal level=-59 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:113 Invalid misc:1597 Missed beacon:0

lo no wireless extensions.

eth0 no wireless extensions.



root@Asgard:~# ifconfig


wlan0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500
inet 192.168.1.125 netmask 255.255.255.0 broadcast 192.168.1.255
inet6 fe80::223:4eff:fe56:a781 prefixlen 64 scopeid 0x20<link>
ether 00:23:4e:56:a7:81 txqueuelen 1000 (Ethernet)
RX packets 167618 bytes 186191338 (177.5 MiB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 95444 bytes 11563273 (11.0 MiB)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0



root@Asgard:~# airmon-ng check kill

Killing these processes:

PID Name
2058 wpa_supplicant

root@Asgard:~# airmon-ng start wlan0


PHY Interface Driver Chipset

phy0 wlan0 ath5k Qualcomm Atheros AR242x / AR542x Wireless Network Adapter (PCI-Express) (rev 01)

(mac80211 monitor mode vif enabled for [phy0]wlan0 on [phy0]wlan0mon)
(mac80211 station mode vif disabled for [phy0]wlan0)

root@Asgard:~# airodump-ng wlan0mon

CH 5 ][ Elapsed: 2 mins ][ 2017-01-26 17:47

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

C4:EA:1D:BC:5F:A7 -63 317 1 0 11 54e WPA2 CCMP PSK HighWay
32:91:8F:44:1C:9E -69 207 0 0 1 54e. WPA2 CCMP MGT WOW FI - FASTWEB
30:91:8F:44:1C:9D -68 217 0 0 1 54e WPA2 CCMP PSK TNCAP441C9D
F0:84:2F:C9:60:86 -71 231 0 0 9 54e WPA2 CCMP MGT WOW FI - FASTWEB
F0:84:2F:C9:60:83 -71 235 0 0 9 54e WPA2 CCMP PSK FASTWEB-1-K1RcVvAkG4nR
C4:EA:1D:69:06:31 -81 108 0 0 1 54e WPA2 CCMP PSK FASTWEB-1-690631
C6:EA:1D:69:06:32 -84 88 0 0 1 54e. WPA2 CCMP MGT WOW FI - FASTWEB
F8:35:DD:EB:07:31 -89 36 0 0 11 54e. WPA CCMP PSK GOinternet_EB0734
00:F4:6F:08:20:E7 -89 69 0 0 1 54e. WPA2 CCMP PSK AndroidHotspot7953
DC:0B:1A:3B:BD:5B -92 4 0 0 1 54e WPA2 CCMP PSK Telecom-71687253

BSSID STATION PWR Rate Lost Frames Probe

C4:EA:1D:BC:5F:A7 00:23:4E:56:A7:81 -1 1e- 0 0 4

root@Asgard:~#


after 2 minutes my iphone connected to the same network don't has been found. and i can't believe that all round there i no one client.. ..

what i've to try?

thanks a lot

[grid]

@frank082, in your airodump-ng output, I see a client 00:23:4E:56:A7:81, connected to the ESSID HighWay

[frank082]

@frank082, in your airodump-ng output, I see a client 00:23:4E:56:A7:81, connected to the ESSID HighWay

tnx @grid for your answer, but the client is my system that see it self.. .. mac address are station, my pc, and bssid my router.. ..

this thing is very strange,, ,, beacuse with option check kill, airmon-ng terminated wpa_supplicant.. ..