What is Monitor mode used for?
Capturing all wireless traffic within range, not just data intended for the interface.
What tool enables monitor mode?
Airmon-ng.
What can you detect with monitor mode?
Unauthorized devices, vulnerabilities, and wireless traffic.
What command shows interface name, driver, and chipset?
sudo airmon-ng.
What does ‘PHY Interface Driver Chipset’ output display?
Information about wireless interfaces and their drivers.
How do you start monitor mode on wlan0?
sudo airmon-ng start wlan0.
Why kill processes before enabling monitor mode?
Network managers may interfere by changing channels or reverting to managed mode.
Which command kills interfering processes?
sudo airmon-ng check kill.
Which processes often interfere with Airmon-ng?
NetworkManager, wpa_supplicant, and dhclient.
What does the message ‘(monitor mode vif enabled)’ mean?
Monitor interface has been successfully created.
How do you verify monitor mode is active?
Run iwconfig and check for ‘Mode:Monitor’.
What frequency and TxPower are shown in iwconfig?
Frequency: 2.457 GHz, Tx-Power=30 dBm.
How do you check for processes that may interfere?
sudo airmon-ng check.
What command stops monitor mode?
sudo airmon-ng stop wlan0mon.
How to confirm interface is back to managed mode?
Run iwconfig and check for ‘Mode:Managed’.
What does ‘mac80211 station mode vif enabled’ mean?
The interface has returned to managed mode.
What are signs monitor mode failed?
Airmon-ng errors or iwconfig not showing ‘Mode:Monitor’.
What command lists processes causing trouble?
sudo airmon-ng check.
What does ‘airmon-ng check kill’ do exactly?
Terminates background services that interfere with packet capture.
Which mode allows normal Wi-Fi connections?
Managed mode.
Why is stopping monitor mode important post-engagement?
To restore normal Wi-Fi connectivity and avoid channel conflicts.
