yashsingh1/xdaforums huggingface dataset:
[Tilt, TyTN II, MDA Vario III General] cryptyk:
I'm DYING for a passive mode sniffer for the kaiser, but I couldn't get this one working. When I check "extended mode", fire up the WLAN and start capturing I get an error: "Anomalies: 0x7". And I see no packets (not even from my router).

I'm using a custom ROM though - maybe I'll flash back to the stock rom to see if it makes a difference. I really want to get a sniffer working.
[Tilt, TyTN II, MDA Vario III General] cryptyk:
Ah, I spoke too soon. It does work - kind of.

It does, in fact, capture packets in promiscuous mode, but only after I've connected andauthenticated to the access point.

I was hoping this tool was going to let me see client's and access points without requiring me to connect to the network.
[Tilt, TyTN II, MDA Vario III General] persiansown:
Me too :-(
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
No sniffer I have ever used will allow traffic monitoring without first joining the network. The only thing I've seen that even comes close is a linux distro called Backtrack2, but that is primarily designed to discover WEP/WAP encryption keys by essentially sending out false failed connect packets and reading the access points replies. But that is way beyond the scope of this forum.
[Tilt, TyTN II, MDA Vario III General] cryptyk:
Almost all of the discovery applications capture packets without being authenticated to the network. NetStumbler(Win)/MiniStumbler(PPC), WiFiFoFum(PPC), Kismet(*nix), AirSnort(*nix), etc.

That's how they find Access Points without authenticating. All of the ones for the ppc, however, run the card in an active mode which will only locate access points and ad-hoc clients. The benefit of promiscuous mode is that it lets you see traffic from all devices in range. This software does that for authenticated networks, but apparently ignores or doesn't display the packets the card is receiving for non-auth'd networks.

Closer though. These guys are the first I've heard of that put the card into passive mode on the Kaiser. Hopefully they'll update the software to show at least MAC IDs and SSIDs from non-auth'd clients and APs.
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Never seen any of those able to capture traffic without authenticating on the wireless network. Perhaps I am missing somthing. Yes they can detect the access points, they will give you the mac address and other vital info, but they will not allow you to monitor network packets without joining the network. Am I wrong?

If I am mistaken please provide how netstumbler (or any others that you list, Iv'e used them all) can capture traffic without joining the network in question. Even Kismet and Airsnort require you to join the network before client detection can take place. Or am I just wrong?
[Tilt, TyTN II, MDA Vario III General] slowatsch:
Well here's written allot of bullsh*

No "Sniffer" can just Sniff packages from an encrypted wlan without autentificate on the Wlan or what ever... the clue is, that WEP/WPA is an encryption of the traffic, so you can't sniff it directly. Yes you can see cryptic packages, but not the real content.

Kismet and Aircrack try to crack/break the encryption... and THEN when you have the Key to the network you can sniff what ever you want, because you can now read the stuff flying around in the air.

Netstrumbler doens't see the real content of the packages @all. But through the MAC address of the Access-Point (Wlan router) and some header information of the encrypted packages, it can find out the RSSID, the Channel it is running on and the encryption type of the Wlan.

So the usage of the Tools would be...

1. Use Netstrumbler to find the network and get some basic informations.

2. Use Kismet/Aircrack to crack/break/find the WEP/WPA key to encrypt the pakages.

3. Use the sniffer to capture the decrypted stuff flying around....
[Tilt, TyTN II, MDA Vario III General] laakness:
Wrong!...but a little right. Network General, like most legit (paid for sniffers), do not need to be associated to the network in order to capture packets. Yes they are encrypted packets but if you are using the sniffer for legit reasons then you have the key/auth already and are analyzing your own network for issues and see all the packet data you need.
[Tilt, TyTN II, MDA Vario III General] PerfAlbion:
This isn't accurate. I can capture your traffic over the air and:

If it's WEP, figure out the key from the traffic I've captured, and decrypt it all after the fact.

If it's an earlier version of WPA, I can do the same.

If it's a later version of WPA/WPA2, it's gonna be hard, but not necessarily impossible. If I know the key, it will be considerably easier.

There is no such thing as "unbreakable" encryption. Just encryption that takes a long, long time to crack. But once I've got the key, I can decrypt things that I've already captured.
[Tilt, TyTN II, MDA Vario III General] synthetik909:
When i go to select my adapter i keep getting "Cannot get adapters list!" Are there other options that i am not aware of? Ive been looking for a promisc sniffer for this ever since i picked it up!
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Ive never had a problem with it not seeing my network adapter. What ROM are you using?
[Tilt, TyTN II, MDA Vario III General] cryptyk:
Fine. I'll reverse your bull**** call =)

Here is the breakdown people:

A wireless card in active mode can see the beacons being sent out by access points and ad-hoc networks. It can also see any traffic between itself and those access points and ad-hoc networks.

A wireless card in passive mode can see everything floating around in the air.

That's just the hardware part. Now, even though your card is in passive mode and can see those packets floating around, it can't necessarily decrypt them. HOWEVER, it can see the SSID (if it's there), MAC ID, etc. It can also see those same header items from clients. The point here is that this particular packet sniffer is not reporting these items in it's interface.

What I was asking (hoping) in my previous post is that the software maker would report these items in the interface as the card collected them. I'm not interested in the data of the packets on my network. I'm interested in the MAC addresses of all of the wireless devices (access points, ad hoc networks AND clients) in range.

And as someone else pointed out, you can in fact lift a key and decrypt packets in passive mode without ever authenticating to the network. If these guys extend their app to add this functionality (along with signal strength of the detected devices), I would buy it today.
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Nice post cryptyk.

It seems we are whining about what features we each think a packet sniffer *SHOULD* have rather than the functionality of this particular program.

Handy Sniffer does what *I* want it to do, and that is examine the contents of packets travelling accross a wireless LAN that I am connected to. Client discovery, wep key discovery, all that can be handled by other means. HS is not a intrusion detection system or a network discovery tool. However it *IS* the only packet sniffer that allows me to monitor traffic to/from other clients that are connected to my wireless lan. For that I am greatful.
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Start the capture BEFORE you re-enable your wireless NIC. That is the trick.
[Tilt, TyTN II, MDA Vario III General] cryptyk:
I get the error either way. It doesn't seem to affect anything, though.
[Tilt, TyTN II, MDA Vario III General] emariu:
Can anyone please post the cab for HSniffer 1.2 because the original link and site are not working anymore..?
[Tilt, TyTN II, MDA Vario III General] nocomp:
hi,

thx for this great appz,

i tried it on my p3600 but unfortunatelly,i only dump packets from my pda, not from the lan.

any idea why?

with mobile sniffer i get a message "promisc mode not supported,is that a clue?"

best regards
[Tilt, TyTN II, MDA Vario III General] emariu:
Can anyone give me a link for the latest 1.2 version?
[Tilt, TyTN II, MDA Vario III General] phaej:
Its asking for name and key?
[Tilt, TyTN II, MDA Vario III General] AlexB:
Hi everybody,

Nick Collision's topic is very hot discussion... :)

If you get "Anomalies" message then sniffer cannot enable unofficial promiscuous mode ("Extended Mode" + "Promiscuous Mode") and additional analysis is needed... Without extended mode sniffer try to enable official promiscuous mode and you see or don't see foreign packets. There are no error messages.

Extended mode is adapter driver dependent ("Anomalies")!

Link: http://winm-soft.atspace.com/
[Tilt, TyTN II, MDA Vario III General] slowatsch:
If you see CRACKING of an Encryption as basic functionality of a sniffer you and cryptyk are right. And if you have the key your self the case is clear, but someone wrote above that he wants to sinff without the key... if this is wrong, I'm sorry ;)

if you would have read my post correctly I said, that you can sniff stuff, when you know the encryption key, and this also in passive mode... that doesn't matter. But to get the key, you need aircrack/kismet whatever app to calculate etc... the key that is used.

So to say it clear, you dont need to anthentificate but you need to know they key for the encryption.

But in my opinion a Sniffer and a Cracker are something diffrent. Additionaly it also has some legal differences... sniff stuff you can read plain is one thing, break/crack an encryption to sniff stuff is something different...
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Nice to see you here Alex!! ;) Ive never seen these errors which is why I always ask what ROM version ppl are using. There may be slight driver differences between the various ROMS out there. All I can say is that it works flawlessly with my original HTC factory Kaiser ROM and the files that are included with the ver 1.2 build.
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
I have only tested it with a TNETW12511 network adapter as was installed in my Kaiser with original factory ROM. Your network adapter is prolly not fully supported.

The original Handy Sniffer was designed around SDIO interface wireless adapters. Alex and I lucked out by finding that the drivers for the TNETW12511 in the Kaiser was fairly easy to adapt using his original blueprint. I call it genius, but he calls it luck. :)

Dont expect to use Handy Sniffer on much else than a SDIO wireless device or a Kaiser aka. HTC TytnII. If it works on your device,then let us know!

Also, need feedback from AT&T Tilt users, and ppl that have used custom ROMS.
[Tilt, TyTN II, MDA Vario III General] emariu:
I still cannot download version 1.2 from the original site/link you gave

Please make a rapidshare link for this
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Rapidshare is unavailable for many people behind corprate networks or ISP NATS.

You can get it directly from the author here:

http://winm-soft.atspace.com/

I just fixed the original download link as well.
[Tilt, TyTN II, MDA Vario III General] ladytoast:
I too get the same error. My ROM is listed below.
[Tilt, TyTN II, MDA Vario III General] orionofset:
cab not installing

Hello,

Wondering if anyone is having a similar problem but when I try to install the cab file for handy sniffer 1.3, I get an error saying the cab installation was unsuccessful. I tried downloading the cab onto my storage card from multiple sites offering the application but I get the same problem. I am still able to install cab files from any and every other program....

ATT tilt

Dutty's Nu Skool 7 ROM

G22.45.88.07H

H1.56.00.00
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Just installed ver 1.3 myself. No problems. I do not know yet what changes were made between 1.2 and 1.3
[Tilt, TyTN II, MDA Vario III General] sdrguy:
Is there an installer for this application?

Hello,

I've downloaded the program a couple of times, and it comes

without a installer

I have been able to copy the files over to the Ipaq 3955 running

Windows CE 2003 using ActiveSync, and I can " File Explore " the files

on the device, but that is about all.

Is there a Installer for this application that ActiveSync will recognize?

And yes I downloaded the files from the Author's website.

Thanks in advance for any advice :)

Awaiting your replys.

Sincerely,

SDRGuy
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
Are you saying you cannot install the program using the downloaded cab file? What happens when you launch the .cab file on your device?
[Tilt, TyTN II, MDA Vario III General] sdrguy:
Hello,

I got it resolved.

I found a program to install the cab file.

So its installed now ;)

Thanks for your reply.

Sincerely,

SDRGuy
[Tilt, TyTN II, MDA Vario III General] aes512:
I can't get the program to sniff until I auth with my AP (using an AT&T Tilt 8900 w/factory ROM). I hope that the promisc mode driver mod is not a hoax :confused:
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
seattleweb:

Promiscuous mode simply means that you can view the packets sent to/from other devices connected to the access point/router. HS does that well on my Kaiser. You still need to connect to that access point in order to view its traffic.
[Tilt, TyTN II, MDA Vario III General] aes512:
Believe me I'm very well aware of promisc mode on a wifi adapter (I'm a Senior member and beta tester for the B|T distro). It was late last night when I stumbled upon HS and didn't appreciate it until today :cool:

So let me ask, do you know of any development or plans for modding the driver for monitor mode? This would obviously be a challenging task :eek:
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
I guess all I can do is ask them :) which I will, and post back when I hear anything. I do expect it would be daunting.
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
I have to add too, that I expect I *WILL* hear back from WinMsoft. Their response time has been crazy fast. From the time of my initial query and driver uploads to an actual working prototype release was about 3 days.
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
seattleweb:

WinMsoft reports that monitor mode would be pretty much impossible using their method of patching the drivers. Oh well... :(
[Tilt, TyTN II, MDA Vario III General] aes512:
Yeah I can see that. I've been looking at the TNETW1251 driver and there isn't a lot there to work with (too bad it doesn't have the acx100 :( ).
[Tilt, TyTN II, MDA Vario III General] pankul:
new version 1.4

http://winm-soft.atspace.com/data_source/hsniffer1.4_wm5.CAB

i just saw it... thought you all should know.
[Tilt, TyTN II, MDA Vario III General] aes512:
Thanks for the update... :cool:
[Tilt, TyTN II, MDA Vario III General] franklyok:
Any alternative to make it work on Hermes.

Hello!

HS 1.5 is out there. It still does not work on Hermes in promisc. mode. :-( Any possibility to make it work on Hermes? Change WLAN drivers or something?

Could'nt fine any support channel for HS to ask them. Anyone knows?
[Tilt, TyTN II, MDA Vario III General] nsa666:
It works with Kaiser. Thank you!
[Tilt, TyTN II, MDA Vario III General] Nick Collision:
New Handy Sniffer 2.0 released soon if not now!

Handy Sniffer can now sniff packet contents over your cellular connection!! No, not just wifi, now sniffs over Edge, 3G etc.

This is the only sniffer I have seen that can do this on your mobile device. Tested and working on my Kaiser.

Need to analyze specific traffic over your device connected to the cellular network? This is it. This is the ONLY one as far as I know.

The new modular architecture can even be extended with external protocol analyzers.

http://winm-soft.atspace.com/

2.0 out soon!!

BTW i do not work for Winmsoft i just test for fun.
[Tilt, TyTN II, MDA Vario III General] ninocass:
hey

i assume this sniffs the local GSM connection and not that of other GSM devices
[Tilt, TyTN II, MDA Vario III General] technonaut:
TCPDump

Does anybody know off-hand if this will generate a TCPDump compatible output file that could be loaded into wepcrack, cowpatty etc.?
[Tilt, TyTN II, MDA Vario III General] Seifer:
i would like to know that too. i need to create caption files for use in aircrack but airodump doesn't work on wm6.1 . i just need to get IVs.
[Tilt, TyTN II, MDA Vario III General] LvDisturbed1:
Any good reliable key crackers?
[Tilt, TyTN II, MDA Vario III General] Kappaloris:
Since this program lets you send raw packets too it would be interesting being able to do some basic packet injection.

On aireplay-ng documentation you can see there are some different attacks, but there isn't any information on how the packet is structured.

Also, is it useful to inject just a little packets or do you need to inject a big quantity to recieve some more information to capture?

Well, even if it turns out to be useless, I'd like to know anyway how these packets are structured.

edit: I just saw that custom modules can be added too. Could this be a good method to implement such feature?
[Tilt, TyTN II, MDA Vario III General] josefcrist:
what is the difference between promiscuous mode and monitor mode? can i take the collected packets and import them into aircrack and get a key as long as i have enough ivs?

edit i just emailed the developer and he said no you cant capture raw wifi packets. so if anybody knows how to do that pm me please.
[Xperia Z2 Q&A, Help & Troubleshooting] Smaali:
Hi guys any nougat rom 7.ftf for xperia z2 d6503

using flashtool to install

​
[Xperia Z2 Q&A, Help & Troubleshooting] hamzxoxo:
Ftf are official stock roms, and given the fact that Z2 is not going to get official Nougat from Sony, there's not going to be any "Nougat Ftf". Also, this is not the place to ask questions, from next time please post in 'XPERIA Z2 Q&A, HELP & TROUBLESHOOTING' section.
[AT&T LG G3] bel2033:
hi everyone i just got a new lg g3 at&t model with a Li-Polymer battery not Li-ion and always turned off at 50 60 % and won't turn on unless i plug it with a charger

Ps: he don't turned off when airplane mode is on he never did even at 1%

i did a factory reset flash a stock firmware anything solved my problem exept airplan mode

help me please
[AT&T LG G3] hyelton:
You'll need a new battery or it's a hardware issue.
[AT&T LG G3] bel2033:
anyone ??
[AT&T LG G3] hyelton:
Anyone what??
[AT&T LG G3] bel2033:
it's a new battery he did this this at the first use unless i put the airplane mode
[AT&T LG G3] hyelton:
Then it's most likely a hardware issue.

Unless to a non OEM LG battery or knock off Lg battery which can also cause that
[AT&T LG G3] bel2033:
when a pull off the sim he never turned off .
[AT&T LG G3] bel2033:
i solved it by puting the network in wcdma only in the hidden menu , no hardware or battery issue , it was my network ;)
[AT&T LG G3] opentux:
is same for me the phone shutdown at 50 % :(
[AT&T LG G3] Wahaj0001:
I had the same issue my mobile shutdown on 50% 60% when i put sim in it.

i was using non genuine battery then i replaced the battery with original lg g3 battery and the problem was solved.
[Honor 8 Guides, News, & Discussion] xontec:
Hey guys something special for you!

About 1 hour ago xda posted unoffical cm will be released soon for the honor 8!

Im so excited!

Twitter: https://twitter.com/xdadevelopers/status/798144304329826304

screens:
[Honor 8 Guides, News, & Discussion] adriansticoid:
Let us all wait for the magestic moment of release. :)
[Honor 8 Guides, News, & Discussion] xontec:
good to hear about the develope activity cant wait much longer for my device and for CM :) in my opinion CM would perfectly fit on the honor 8
[Honor 8 Guides, News, & Discussion] adriansticoid:
But based in that screensnot, RIL is broken. Maybe it will take until January or so to have a full stable CM13. After that, CM14.1 should be easy breezy. :D
[Honor 8 Guides, News, & Discussion] xontec:
Yeah true but its good to hear something offical and see progress on the developing for the honor 8 especially from xda :D
[Honor 8 Guides, News, & Discussion] adriansticoid:
Yes sooo goood. :D This is one huge milestone.
[Honor 8 Guides, News, & Discussion] Vika__:
I don't think we will have fully stable cm soon. But still, good news!
[Honor 8 Guides, News, & Discussion] hackslash:
Sun will shine on Honor 8 sooner or later. The first step is taken to embark you all on a wonderful journey ahead. Patience is key so remain calm and hope for the best.
[Honor 8 Guides, News, & Discussion] AnDrOiiiD_YT:
No way! Thanks xda! :)
[Honor 8 Guides, News, & Discussion] nbmatt:
Thank goodness. I love this phone, but EMUI just has some very poor design decisions and sometimes feels like a bad third-party skin even after replacing the launcher. Notifications, especially on the lock screen, are just ugly and react entirely opposite of the way they do in iOS or stock Android, and the only lock-screen theme that supports notifications has the clock in the lower corner of the screen (which is nonsense).

There are also a lot of weird quirks that I've experienced, an example being wallpapers bug out most of the time when I try to set them. Sometimes they don't align the way I set them to and when I try to fix the alignment, it will set the wallpaper slightly off the screen so part of the wallpaper is black space. Perhaps this is just an incompatibility with Nova Launcher, though.
[Honor 8 Guides, News, & Discussion] xontec:
Yea i dont like EMUI too and you're right but i love the phone. I have to say some parts of EMUI are well designed and i really like but some are absolute crap.

In my opinion stock Android or any cm based custom rom perfectly fit on it i cant wait to See how it will act with it.
[Honor 8 Guides, News, & Discussion] evilpaul13:
Super happy to see CM ported to the Honor 8! :D
[Honor 8 Guides, News, & Discussion] DigiGoon:
CM 13 is already posted in Android Development section, and RIL is working.
[Honor 8 Guides, News, & Discussion] xontec:
Yes I already saw but my post was before rls :)

Didn't expect that fast :p
[Honor 8 Guides, News, & Discussion] kevev:
WooHoo!!
[Huawei P9 Plus Questions & Answers] Glen L:
My Bluetooth just disconnects and reconnects randomly. Any suggestions?