Additionally, airodump-ng writes out several files containing the details of all access points and clients seen.

source: https://www.aircrack-ng.org/doku.php?id=airodump-ng

But how is airodump-ng able to map out all of that? What type of packets are being captured by it?

  • 1
    When quoting a source, it is useful and helpful to include the quote in quotes and include the source. – schroeder Feb 2 '19 at 13:15
  • Ultimately, this is not a security question but a "how does wifi work" question. Wifi uses radio signals, which means that all APs and clients are constantly broadcasting, and those broadcasts are public and you can capture those broadcasts. – schroeder Feb 2 '19 at 13:18
  • To add to that: it can do that because some wifi cards support monitor mode, a way of operating that captures and translates all packets received, even ones not addressed to the cards MAC address. See this page for drivers that support it wireless.wiki.kernel.org/en/users/drivers – J.A.K. Feb 2 '19 at 19:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.