The sniffer on cain

I've been having problems with getting any results with the sniffer on cain with WinPcap, theres multiple wireless connections in my area but i always get nothing.

I always activate WinPcap if it makes a diffrence and even make sure the over laptops active at the time any ideas?

I also use a wireless connection if it makes a diffrence.

your wireless card might not be good enough to gather packets. i have networks to and am in the same position as u. my friends laptop can, he was tapping networkings and stealing passwords i felt soo left out =(

Cain can't detect wireless connections properly as it's written to sniff packets from an ethernet interface.

you have to be in a LAN to actually be able to sniff.

check out this article:

http://www.hellboundhackers.org/articles/744-Mitm,-arp-poison-routing,-network-sniffing-using-cain-and-able.html

a better bet is that you use a proper packet sniffer like Wireshark.

Yeah I had the same problem once, good article tho man…cheers for pointing that out to us.

Recomend the read.

You can use cain on wireless you need to have Airpcap installed, Even with wireshark you'll need airpcap to get good results.

Thanks for the replys, i'll should be able to get this to work now 1 way or the other, and on another note on the network quicklist on cain, you can add ip addresses and when you try to get on it a log in box appears what would you enter on here?

i think it'll be the username/password combo for the network you trying to access.

actually, i assumed that he already installed winpcap along with either c&a or wireshark.

you can check irongeek.com , he has some tutorials and videos on this stuff.

No, you dont even need airpcap, all you have to do to get packets is turn OFF promiscuous mode and it works fine. I've used it before on wireless networks and it still works, but you ave to be connected to them first. If you're looking to get a key then download aircrack.

Thx again for the replys i'm just having fun getting to know wireshark (I'm easy to entertain) =) I

I'm not going to lie, most of you are morons. :ninja:

Atomic Blaze wrote: I'm not going to lie, most of you are morons. :ninja: What is the fucking point of insulting them? If you knew what they were doing wrong, then why did you not post earlier to try and help them?

Umm, He's an ass. If you have something to offer than do it.

Anyway:Just let me touch base on why you should be using Airpcap with cain. If you run it without Airpcap you can only run an active scan which in turn makes your presence known to others. If you use Airpcap you can run in passive mode which means your undetected.

>Active means that you're sending out signals and seeing who replies or echoes back, which makes your presence known.

>Passive means that you are just listening without making your presence known.

I should have mentioned that earlier but figured people would have read the help files in cain. If not check them out.It will explain more for "channel hopping" features and how much more you can do than just using Winpcap Packet Driver to control the network card.

fixer wrote: Thx again for the replys i'm just having fun getting to know wireshark (I'm easy to entertain) =) I

oh i know what you mean ;)

korg wrote:

I should have mentioned that earlier but figured people would have read the help files in cain. If not check them out.It will explain more for "channel hopping" features and how much more you can do than just using Winpcap Packet Driver to control the network card.

ouch. :xx:

i found some extra tutorials that might help:

http://www.jasonbarrow.com/?p=29 http://www.irongeek.com/i.php?page=security/AQuickIntrotoSniffers http://www.twistedethics.com/2007/06/11/cracking-wep-with-aircrack-ptw-in-windows-with-airpcap-and-cain/ http://www.nwcet.org/downloads/cainAbel.pdf