iw monitor 接口

如果配置失败或者被重置，建议先确认一下信息

• rfkill 是否关闭

• NetworkManager 是否取消对该接口的管理

查看 PHY

~$ iw dev
phy#1
    Interface wlan1
            ifindex 15
            wdev 0x100000001
            addr 02:00:00:00:01:00
            type managed
            txpower 20.00 dBm
            multicast TXQ:
                    qsz-byt qsz-pkt flows   drops   marks   overlmt hashcol tx-bytes        tx-packets
                    0       0       0       0       0       0       0       0               0
phy#0
        Interface wlan0
                ifindex 14
                wdev 0x1
                addr 02:00:00:00:00:00
                type managed
                txpower 20.00 dBm
                multicast TXQ:
                        qsz-byt qsz-pkt flows   drops   marks   overlmt hashcol tx-bytes        tx-packets
                        0       0       0       0       0       0       0       0               0

理论上 PHY 加载时会创建默认 managed 接口，但也可能不创建，还可以直接查看注册的 PHY

~$ ls /sys/class/ieee80211/
phy0  phy1

sudo iw phy phy0 interface add mon0 type monitor
sudo iw dev wlan0 del
sudo ip link set dev mon0 up

#sudo iw dev mon0 set freq 2437
sudo iw dev mon0 set channel 36

sudo tcpdump -i mon0 -n -w wireless.cap

复原环境

sudo iw dev mon0 del
sudo iw phy phy0 interface add wlan0 type managed