Possible to install airmon-ng or other means to check if WiFi card supports monitor mode ?
by Grobe from LinuxQuestions.org on (#6K37D)
Hi.
I'd try to make it as short as possible. I'm looking for a general command to check whether a WiFi card supports monitor mode or not. Most web searches point toward the airmon-ng command. However, I cannot find one single command that can tell if a network interface actually support monitor mode (without actually testing it).
The closest I got is by use the airmon-ng command wiyh verbose flag, this gives:
Code:# airmon-ng --verbose
Linux resirkulert-Acer 6.7.5-200.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Sat Feb 17 17:20:08 UTC 2024 x86_64 GNU/Linux
Regulatory Domain set to NO, see 'iw reg get' for details
K indicates driver is from 6.7.5-200.fc39.x86_64
V indicates driver comes directly from the vendor, almost certainly a bad thing
S indicates driver comes from the staging tree, these drivers are meant for reference not actual use, BEWARE
? indicates we do not know where the driver comes from... report this
X[PHY]Interface Driver[Stack]-FirmwareRev Chipset Extended Info
?[null]
??????[ieee80211]-unavailable non-mac80211 device? (report this!) Failure detecting driver properly please report
K[phy0]wlp0s20f3 iwlwifi[mac80211]-77.ad46c98b.0 14.3 Network controller: Intel Corporation Wi-Fi 6 AX201 (rev 30) mode managedDoes the command also tries to detect the BT interface card?
This is the WiFi card (this particular type probably don't support monitor mode anyways)
Code:sudo ip a
[sudo]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp1s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
link/ether 08:8f:c3:86:bb:c2 brd ff:ff:ff:ff:ff:ff
3: wlp0s20f3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:a5:54:bf:a5:36 brd ff:ff:ff:ff:ff:ff
inet 192.168.3.128/24 brd 192.168.3.255 scope global dynamic noprefixroute wlp0s20f3
valid_lft 39702sec preferred_lft 39702sec
inet6 <manual_filter_this_out> scope link noprefixroute
valid_lft forever preferred_lft forever
Code:$ cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 1849 13 0 0 0 0 0 0 1849 13 0 0 0 0 0 0
enp1s0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
wlp0s20f3: 39504737 41287 0 0 0 0 0 0 7035337 22099 0 0 0 0 0 0
Code:$ sudo lspci -nnvmm | egrep -A 6 -B 1 -i 'network|ethernet'
Slot: 00:14.3
Class: Network controller [0280]
Vendor: Intel Corporation [8086]
Device: Wi-Fi 6 AX201 [a0f0]
SVendor: Intel Corporation [8086]
SDevice: Device [0074]
Rev: 30
ProgIf: 00
--
Slot: 01:00.0
Class: Ethernet controller [0200]
Vendor: Realtek Semiconductor Co., Ltd. [10ec]
Device: RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller [8168]
SVendor: Acer Incorporated [ALI] [1025]
SDevice: Device [158d]
Rev: 15
ProgIf: 00
Slot: 10000:e0:17.0My question - Does any of the above information carry any information that can confirm or dismiss the possibility of the WiFi card support monitor mode or not ?
I'd try to make it as short as possible. I'm looking for a general command to check whether a WiFi card supports monitor mode or not. Most web searches point toward the airmon-ng command. However, I cannot find one single command that can tell if a network interface actually support monitor mode (without actually testing it).
The closest I got is by use the airmon-ng command wiyh verbose flag, this gives:
Code:# airmon-ng --verbose
Linux resirkulert-Acer 6.7.5-200.fc39.x86_64 #1 SMP PREEMPT_DYNAMIC Sat Feb 17 17:20:08 UTC 2024 x86_64 GNU/Linux
Regulatory Domain set to NO, see 'iw reg get' for details
K indicates driver is from 6.7.5-200.fc39.x86_64
V indicates driver comes directly from the vendor, almost certainly a bad thing
S indicates driver comes from the staging tree, these drivers are meant for reference not actual use, BEWARE
? indicates we do not know where the driver comes from... report this
X[PHY]Interface Driver[Stack]-FirmwareRev Chipset Extended Info
?[null]
??????[ieee80211]-unavailable non-mac80211 device? (report this!) Failure detecting driver properly please report
K[phy0]wlp0s20f3 iwlwifi[mac80211]-77.ad46c98b.0 14.3 Network controller: Intel Corporation Wi-Fi 6 AX201 (rev 30) mode managedDoes the command also tries to detect the BT interface card?
This is the WiFi card (this particular type probably don't support monitor mode anyways)
Code:sudo ip a
[sudo]
1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
inet 127.0.0.1/8 scope host lo
valid_lft forever preferred_lft forever
inet6 ::1/128 scope host noprefixroute
valid_lft forever preferred_lft forever
2: enp1s0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc fq_codel state DOWN group default qlen 1000
link/ether 08:8f:c3:86:bb:c2 brd ff:ff:ff:ff:ff:ff
3: wlp0s20f3: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000
link/ether 00:a5:54:bf:a5:36 brd ff:ff:ff:ff:ff:ff
inet 192.168.3.128/24 brd 192.168.3.255 scope global dynamic noprefixroute wlp0s20f3
valid_lft 39702sec preferred_lft 39702sec
inet6 <manual_filter_this_out> scope link noprefixroute
valid_lft forever preferred_lft forever
Code:$ cat /proc/net/dev
Inter-| Receive | Transmit
face |bytes packets errs drop fifo frame compressed multicast|bytes packets errs drop fifo colls carrier compressed
lo: 1849 13 0 0 0 0 0 0 1849 13 0 0 0 0 0 0
enp1s0: 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0
wlp0s20f3: 39504737 41287 0 0 0 0 0 0 7035337 22099 0 0 0 0 0 0
Code:$ sudo lspci -nnvmm | egrep -A 6 -B 1 -i 'network|ethernet'
Slot: 00:14.3
Class: Network controller [0280]
Vendor: Intel Corporation [8086]
Device: Wi-Fi 6 AX201 [a0f0]
SVendor: Intel Corporation [8086]
SDevice: Device [0074]
Rev: 30
ProgIf: 00
--
Slot: 01:00.0
Class: Ethernet controller [0200]
Vendor: Realtek Semiconductor Co., Ltd. [10ec]
Device: RTL8111/8168/8211/8411 PCI Express Gigabit Ethernet Controller [8168]
SVendor: Acer Incorporated [ALI] [1025]
SDevice: Device [158d]
Rev: 15
ProgIf: 00
Slot: 10000:e0:17.0My question - Does any of the above information carry any information that can confirm or dismiss the possibility of the WiFi card support monitor mode or not ?