Note: sometimes packets from other channels are captured even if airodump-ng is not hopping, because of radio interference. CH = Channel number (taken from beacon packets).#/s = Number of data packets per second measure over the last 10 seconds.#Data = Number of captured data packets (if WEP, unique IV count), including data broadcast packets.Each access point sends about ten beacons per second at the lowest rate (1M), so they can usually be picked up from very far. Beacons = Number of announcements packets sent by the AP.If all clients have PWR as -1 then the driver doesn’t support signal level reporting. Meaning you are hearing only 1/2 of the communication. If the PWR is -1 for a limited number of stations then this is for a packet which came from the AP to the client but the client transmissions are out of range for your card. If the BSSID PWR is -1, then the driver doesn’t support signal level reporting. Its signification depends on the driver, but as the signal gets higher you get closer to the AP or the station. PWR = Signal level reported by the card.In this unassociated state, it is searching for an AP to connect with. In the Client section, a BSSID of “(not associated)” means that the client is not associated with any AP. BSSID = MAC address of the access point.If everything is working correctly, you will see the screen split into two sections (look at the selfie above).

Type airodump-ng wlan1mon, to monitor the air traffic.If this works then running airmon-ng again will show that wlan1 is now wlan1mon (because it’s monitoring).You may have to use airmon-ng check kill, to stop other things from using it.Pending of course that wlan1 is the correct interface. Type airmon-ng, to see which wifi interfaces are available to use.I have a few with an Atheros chipsets, for this demo I used one by a company named ALFA with the model number of AWUS036NH. You will more than likely need to buy a USB wifi adapter capable of using monitor mode.Airmon-ng (Enable Monitor Mode)īefore you can crack anything, you must listen to who is talking across the air, and before that your adapter must be switched into monitor mode.

I used a separate application named Crunch to create a brute-force dictionary. The suite contains around 18 tools depending on the version, but I will only mention a few here (Airmon-ng, Airodump-ng, Aireplay-ng, and most famously Aircrack-ng). While conducting an Air Assault on a wireless network, my weapon of choice is the Aircrack-ng suite. Grant using airodump-ng on the big screen.

Aircrack ng