Take the 2-minute tour ×
Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Is there any equivalent of airodump-ng for Mac OS X (it only runs on linux), providing an overview of the current wireless traffic on nearby Access Points, i.e:

  • number of captured data packets
  • list of devices currently associated with each AP
share|improve this question

4 Answers 4

You can install it using brew

brew install aircrack-ng

Or using port

sudo port install aircrack-ng

share|improve this answer
4  
aircrack-ng suite can actually be installed but the airodump-ng tool won't work on Mac OS (cf wirelessdefence.org/Contents/AircrackORIGINAL.html#q0C0) –  fiddler Apr 5 at 16:03

As I don't have a running linix box at present I'm not up on the capabilities of aircrack-ng

Possibles: iStumbler at http:istumbler.net Of the fairly sparse field,this one is probably the most current.

KisMac is a older port of Kismet last released in 2006, but reported to work on Snow Leopard. Haven't tried it.

Another possible useful tool is WireShark. You will need to install XQuartz to use it, as it's an X11 windows app.

A final possibility is to install windows under VirtualBox, Parallels or VMFusion and give it full access to your ethernet cards.


Based on the clarification in your comment, I think wireshark would do what you want if you want to look at traffic.

If you just want to count packets, you can use netstat. This is a terminal program. (see man netstat)

~/Webwork/sftf
647 ==> netstat  -w10
            input        (Total)           output
   packets  errs      bytes    packets  errs      bytes colls
        73     0      17551         77     0      11256     0
        31     0       4731         41     0       6891     0

-w10 gives you a record every 10 seconds. If you wanted hourly records you'd use -w3600.

Netstat is general purpose. If you have multiple interfaces, you can filter to a given one with the -I flag. You can also do some filtering by protocol, address family.

If you need serious filtering (I want to know how many packets bitorrent sent to the pirate bay last week) then you need either wireshark or tcpdump. (Tcpdump is commandline) Wireshark is basically a GUI on top of tcpdump. Both have their place.

share|improve this answer
    
Thanks for mentioning iStumbler, it looks very interesting. But what I actually want is to gather information on the current traffic (number of data packets and list of associated clients). Virtualization is indeed a solution, but I wanted to know if there was a native Mac OS tool for that. –  fiddler Jan 24 at 8:26
    
I think netstat counting will only work once associated to a network, but not in monitor mode, am I wrong ? –  fiddler Jan 26 at 9:36
    
I just tried. [ netstat -I en2 -w 5 ] reports a string of zeros every 5 seconds. ( I have 4 interfaces on this computer. Overkill....) –  Sherwood Botsford Jan 26 at 20:21
up vote 1 down vote accepted

There doesn't seem to be any tool like this for Mac OS X, though it'd probably be possible to build a script that uses tools like airport and tshark to have an equivalent result.

share|improve this answer

Have you tried http://www.aircrack-ng.org/doku.php?id=install_aircrack

It has instructions to install aircrack-ng on Mac.
From the website:

Installing on Mac OSX The simplest and easiest way to install on Mac OS X is via Macports. You simply do “sudo >port install aircrack-ng”.

Alternatively, use the following instructions:

Make sure you have Xcode installed on your Mac, which can be found on the installer >CD/DVD which came with your Mac. After getting the source you can do a simple “make && >sudo make install” from the untarred directory. When you use the stable, you need to >rename the Makefile.osx to Makefile and when you use the dev version it will autodetect you are using Darwin and compile fine.

Mind you, airodump-ng and aireplay-ng are linux only and will not work under OSX native, so for reinjecting and sniffing you will have to use other means.

If you have an intel Mac check out the VMware Fusion option which is mentioned lower on >this page.

Optional is openssl-dev and sqlite3 which can be installed through fink

share|improve this answer
4  
Well, as said in your quote, airodump-ng and aireplay-ng are linux only and will not work under OSX native. And it indeed does not work. That's why I'm looking for an alternative on Mac OS X (not for packet injection, just for dumping APs and clients along with the number of data packets for each AP) –  fiddler Jan 23 at 6:13

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.