> For the complete documentation index, see [llms.txt](https://playbook.sidthoviti.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://playbook.sidthoviti.com/wifi-pentesting/monitoring.md).

# Monitoring

View Frequency of Wireless Adapter

```
iwlist wlxc4e984103ac8 frequency
```

View Nearby Access Points

```
sudo iw dev wlxc4e984103ac8 scan | grep SSID
```

```
airodump-ng --wps -w airodump_sweep_results wlan0mon

wash -a -i wlan0mon
```

Set interface to Monitoring Mode:

```
airmon-ng start wlan0

ifconfig wlan0 down && iwconfig wlan0 mode monitor && ifconfig wlan0 up
```

Set interface to monitoring mode on a specified channel:

```
airmon-ng start wlan0 8

iwconfig wlan0 channel 8
```

\[Optional] Kill services that might interfere with wireless network interfaces in monitor mode:

```
airmon-ng check kill
```

Set interface back to managed mode

```
airmon-ng stop wlan0mon

ifconfig wlan0 down && iwconfig wlan0 mode managed && ifconfig wlan0 up
```

Monitor a WiFi network to capture handshakes/requests

```
airodump-ng wlan0mon --channel 8 -w airodump_essid_results --essid essid --bssid FF:FF:FF:FF:FF:FF
```

Create Virtual Access Point (VAP) named mon0

```
iw dev wlan0 interface add mon0 type monitor
ifconfig mon0 up
iwconfig mon0
```

Verify using TCPdump for traffic on VAP

```
 tcpdump -i mon0 -s 65000 -p
```

Delete VAP

```
iw dev mon0 interface del
```