Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

armon

macrumors newbie
Original poster
Nov 25, 2006
16
0
I looked around google and there seems to be a problem with running tcpdump/ethereal/wireshark/dsniff and the like over wireless. I have a macbook (coreduo), and any time I try to start wireshark or dsniff I lose my wireless association. Has anyone come up with a solution or workaround? With dsniff after it starts I just re-associate with the AP, but with arpspoof it times out after like 10 seconds which isn't enough time to re-associate. Either way, let me know.
 

SC68Cal

macrumors 68000
Feb 23, 2006
1,642
0
use tcpdump in the terminal to capture the packets, then use your program of choice to read the dumped file.

sudo tcpdump -i en1 -w foo.qq

foo being the name of the file you want to create
 

armon

macrumors newbie
Original poster
Nov 25, 2006
16
0
With tcpdump/dsniff it isn't a problem because they don't time out. I can re-associate with the AP right away. With arpspoof, it times out after a few seconds so I can't. But still, thanks for the suggestion.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.