Is it possible to put the WiFi adapter on a Linux box into monitor mode and then tell it to join a specific WPA2-protected network, so that I might sniff all wireless traffic on that network?
I'm trying to set up something like the Driftnet picture frame project from a few months ago.
However, there are a few key differences which are preventing me (thus far) from completing this successfully:
- I want to run this on my wireless network.
- My wireless network is using a WPA2 passphrase.
- I know this passphrase (obvious, but just in case).
What I'm trying to do is effectively sniff all of the wireless traffic on my own wireless network. (Think: monitoring kids' use of the Internet.) I know that even encrypted WiFi networks are more or less just hubs, broadcasting all packets to all nodes, but I can't figure out how to see (in decrypted form) the traffic that isn't specifically mine.
I can think of a couple of ways to accomplish this, but I'm not clear on which is best (or, heck, even possible).
It seems to me I could try to get the router to simply echo every packet to another box of my choosing, which would run Driftnet against all of the packets. This seems to involve a lot of overhead on the part of my router, though.
This brings me back around to my original question. It seems that in monitor mode, I get everything, and worse, all in encrypted form. Even though I own this network and therefore know the passphrase, there doesn't seem to be any way to post-process the captured packets and decrypt them before they reach Driftnet.
I'm the first to admit my understanding of some of the wireless technologies is a bit sparse, so maybe I'm missing something very basic here.
Can anyone kindly enlighten me?