AX211 6E wireless card as Sniffer in Ubuntu 20.04 or 22.04

PavanSanghvi · ‎11-03-2023

Can some one please help me with the driver of AX211 6E WIfi card so that it can be put in monitor mode so that I can sniff the wireless packets in Ubuntu 20.04/ 22.04 OS version.

I am able to put it in monitor mode but it is not capturing any packets

Jocelyn_Intel · ‎11-03-2023

Hello, @PavanSanghvi

Thank you for posting on the Intel® communities. I will gladly assist you here.

What is the model of your Intel® NUC?

Please be aware Linux distributions provide the necessary drivers for the hardware in the Intel® NUC systems: Linux* Support for Intel® NUC

Best regards,

Jocelyn M.

Intel Customer Support Technician.

PavanSanghvi · ‎11-05-2023

Sorry, It is a Dell Latitude 5440 Laptop

System Information
Manufacturer: Dell Inc.
Product Name: Latitude 5440
Family: Latitude

Product Name: 03J519

user@user-Latitude-5440:~$ lsb_release -a
No LSB modules are available.
Distributor ID: Ubuntu
Description: Ubuntu 20.04.6 LTS
Release: 20.04
Codename: focal

uname -a
Linux user-Latitude-5440 5.15.0-88-generic #98~20.04.1-Ubuntu SMP Mon Oct 9 16:43:45 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

iw dev
phy#0
Interface wlp0s20f3
ifindex 7
wdev 0x1
addr <hiding mac>
type monitor
channel 1 (2412 MHz), width: 20 MHz (no HT), center1: 2412 MHz
txpower 0.00 dBm
multicast TXQ:
qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets
0 0 0 0 0 0 0 0 0

user@user-Latitude-5440:~/Sniffer_script$ sudo lshw -C network
*-network:0
description: interface
product: Intel Corporation
vendor: Intel Corporation
physical id: 14.3
bus info: pci@0000:00:14.3
logical name: wlp0s20f3
version: 01
serial: hiding
width: 64 bits
clock: 33MHz
capabilities: pm msi pciexpress msix bus_master cap_list logical
configuration: broadcast=yes driver=iwlwifi driverversion=5.15.0-88-generic firmware=71.058653f6.0 so-a0-gf-a0-71.uc latency=0 link=yes multicast=yes
resources: iomemory:600-5ff irq:16 memory:60531a4000-60531a7fff

Jocelyn_Intel · ‎11-06-2023

Hello, @PavanSanghvi

Thank you for your reply.

Please be aware that the Intel NUCs forum is for Intel NUC product issues or inquiries, so we are moving it to the correct forum; Wireless, to keep order and avoid confusion.

Regarding your inquiry, the necessary drivers for Linux OS are provided by your Linux Distribution.

Best regards,

Jocelyn M.

Intel Customer Support Technician.

PavanSanghvi · ‎11-07-2023

Hi Jocelyn

I am unable to capture any packets though the Wireless interface is put as monitor mode

user@user-Latitude-5440:~/Sniffer_script$ iw dev
phy#0
Interface wlp0s20f3
ifindex 9
wdev 0x1
addr <hiding mac>
type monitor
channel 1 (2412 MHz), width: 20 MHz (no HT), center1: 2412 MHz
txpower 0.00 dBm
multicast TXQ:
qsz-byt qsz-pkt flows drops marks overlmt hashcol tx-bytes tx-packets
0 0 0 0 0 0 0 0 0

tshark -i wlp0s20f3
Capturing on 'wlp0s20f3'
^C0 packets captured

Jocelyn_Intel · ‎11-07-2023

Hello, @PavanSanghvi

Thank you for your reply.

Just to confirm:

Is the Intel® Wi-Fi 6E AX211 the pre-installed wi-fi card in your laptop or is it an integration (upgrade/ not the original card)?
Did you make sure that your Laptop supports this OS with your Laptop manufacturer?
Was it working fine before?

Best regards,

Jocelyn M.

Intel Customer Support Technician.

Jocelyn_Intel · ‎11-10-2023

Hello, @PavanSanghvi

I hope you are great.

I am checking this thread and I would like to know if you were able to check out my previous post.

Best regards,

Jocelyn M.

Intel Customer Support Technician.

Jocelyn_Intel · ‎11-15-2023

Hello, @PavanSanghvi

I hope you are doing great.

As we have not heard back from you, we will proceed to close this thread now.

If you need any further assistance, please feel free to contact us back and submit a new question as this thread will no longer be monitored.

Best regards,

Jocelyn M.

Intel Customer Support Technician.

adrmateu · ‎02-23-2024

Hello Jocelyn,

I hope you are doing great.

I am experiencing the same issue as the previous user.

The monitor mode does not work for me neither.

I have an HP Elitebook with the Intel(R) Wi-Fi 6E AX211 160MHz, REV=0x370, running an Ubuntu 22.04, and I am not able to sniff ieee80211 packets.

First I verified the monitoring capability is available for this NIC:

>iw list

(output)

...

Supported interface modes:
* IBSS
* managed
* AP
* AP/VLAN
* monitor
* P2P-client
* P2P-GO
* P2P-device

...

Then I configure my NIC to Monitor mode:

> ip link set dev wlp0s20f3 down

> iwconfig wlp0s20f3 mode Monitor

Next verify it is correctly set:

> iwconfig wlp0s20f3
wlp0s20f3 IEEE 802.11 Mode:Monitor
Retry short limit:7 RTS thr:off Fragment thr:off
Power Management:o

Then,

> ip link set dev wlp0s20f3 up

I tried:

>iw dev

, but had the same result as the previous user:

I tried to use wireshark and couldn't see any ieee80211 packages or IP/TCP. Nothing. No packets at all.

Best Regards,

Adrian

adrmateu · ‎03-08-2024

Hello again Jocelyn,

In the end the monitor mode works. It was just a question of issuing the right commands.

Thanks,

Adrian