I could set my Wireless connection on Monitor Mode. And i could capture packets using wireshark. But how do i set my wired connection on monitor mode so that i can capture wired traffic too on wireshark? Please help!
Ubuntu – How to set wired interface on Monitor Mode
monitoringwireshark
Related Solutions
The "No interface can be used for capturing in this system with the current configuration" message commonly appears when you don't have the privileges to access the network interfaces for monitoring. Try opening a terminal and running gksudo wireshark. If several network interfaces appear, it's because when you run wireshark without root permissions you don't have the privileges to monitor.
To fix that, run the following command in a terminal:
sudo setcap CAP_NET_RAW,CAP_NET_ADMIN,CAP_DAC_OVERRIDE+eip /usr/bin/dumpcap
a little explanation is available on this other AskUbuntu question
Finally I found a solution by little research. The problem was really with the device driver I had chosen in Additional Drivers as the image shows in the question. I then selected the second choise in wireless drivers which is "Do not use this device". It doesn't have the meaning it implies, it only does avoid using broadcom wireless STA driver. Then I restarted my machine and I could see my interface as wlan0 (which was previously displayed as eth1).
Then I executed following command (airmon-ng bash script), which I could easily turn wireless card into monitor mode.
sudo airmon-ng start wlan0
It was required to start monitoring mode of the wlan0 interface using airmon-ng script before sniffing. Otherwise when I start a sniff using wlan0 with wireshark(monitor mode enabled in wireshark) I could only sniff few seconds and automatically device disconnects from the network.
Best Answer
You don't. Monitor mode is a Wi-Fi concept that doesn't apply to wired networks.
On a wired network, if you want to capture traffic that's not being sent to or from your machine, you need to put the adapter into promiscuous mode; Wireshark (and tcpdump) default to doing so, so you'd have to do something special not to put the adapter into promiscuous mode.
However, most Ethernet networks are switched, and, on a switched Ethernet, it's not sufficient to turn on promiscuous mode; you also have to arrange that the switch send you other hosts' traffic.