Monitor mode

tests for monitor (promiscuous) mode, where the wi fi card captures all traffic on a given channel rather than associating with a network test sequence switch the wi fi card to monitor mode dump traffic on each band decode the captured traffic pmkid sniff perform an rsn pmkid sniff against a real access point ✅ test log monitor mode tested and recorded using build 1350 at 23 jun 2026 environment debian trixie; made sure that networkmanager , iw and dnsmasq are present in the system switch to superuser console sudo su run this to see your wi fi card name nmcli device status | grep wifi in our case it is named wlxb06b11673af2 device type state connection lo loopback connected (externally) lo wlxb06b11673af2 wifi disconnected save the wi fi card name to a variable dev=wlxb06b11673af2 release the radio from networkmanager and tear down nmcli dev set "$dev" managed no ip link set "$dev" down iw dev "$dev" del stop anything that retunes the radio pkill x wpa supplicant 2>/dev/null rfkill unblock wifi set regdomain before creating the vif, while the phy is idle iw reg set hk create monitor as the only vif on phy0 iw phy phy0 interface add mon0 type monitor ip link set mon0 up tune to any channel iw dev mon0 set channel 36 verify tcpdump i mon0 e n s 256 |grep i beacon you should be able to see ssid beacon packets 13 21 53 554963 22732764us tsft 6 0 mb/s 5180 mhz 11a 66dbm signal \[bit 22] bssid\ xx\ xx\ xx\ xx\ xx\ xx da\ ff\ ff\ ff\ ff\ ff\ ff sa\ xx\ xx\ xx\ xx\ xx\ xx beacon (chasing the 5g nut) \[6 0 9 0 12 0 18 0 24 0 36 0 48 0 54 0 mbit] ess, privacy \[|802 11] 13 21 53 567951 22745773us tsft 6 0 mb/s 5180 mhz 11a 40dbm signal \[bit 22] bssid\ xx\ xx\ xx\ xx\ xx\ xx da\ ff\ ff\ ff\ ff\ ff\ ff sa\ xx\ xx\ xx\ xx\ xx\ xx beacon (sid the sloth) \[6 0 9 0 12 0 18 0 24 0 36 0 48 0 54 0 mbit] ess, privacy \[|802 11] 13 21 53 657399 22835161us tsft 6 0 mb/s 5180 mhz 11a 66dbm signal \[bit 22] bssid\ xx\ xx\ xx\ xx\ xx\ xx da\ ff\ ff\ ff\ ff\ ff\ ff sa\ xx\ xx\ xx\ xx\ xx\ xx beacon (chasing the 5g nut) \[6 0 9 0 12 0 18 0 24 0 36 0 48 0 54 0 mbit] ess, privacy \[|802 11] 13 21 53 670426 22848173us tsft 6 0 mb/s 5180 mhz 11a 40dbm signal \[bit 22] bssid\ xx\ xx\ xx\ xx\ xx\ xx da\ ff\ ff\ ff\ ff\ ff\ ff sa\ xx\ xx\ xx\ xx\ xx\ xx beacon (sid the sloth) \[6 0 9 0 12 0 18 0 24 0 36 0 48 0 54 0 mbit] ess, privacy \[|802 11] 13 21 53 759809 22937572us tsft 6 0 mb/s 5180 mhz 11a 66dbm signal \[bit 22] bssid\ xx\ xx\ xx\ xx\ xx\ xx da\ ff\ ff\ ff\ ff\ ff\ ff sa\ xx\ xx\ xx\ xx\ xx\ xx beacon (chasing the 5g nut) \[6 0 9 0 12 0 18 0 24 0 36 0 48 0 54 0 mbit] ess, privacy \[|802 11] 13 21 53 772734 22950573us tsft 6 0 mb/s 5180 mhz 11a 41dbm signal \[bit 22] bssid\ xx\ xx\ xx\ xx\ xx\ xx da\ ff\ ff\ ff\ ff\ ff\ ff sa\ xx\ xx\ xx\ xx\ xx\ xx beacon (sid the sloth) \[6 0 9 0 12 0 18 0 24 0 36 0 48 0 54 0 mbit] ess, privacy \[|802 11]