airodump

airodump-ng captures frames — use only with $LAB_SSID/BSSID filter on YOUR lab channel.

airodump• Audio Walkthrough

00:00/03:03

Visual · wireless_airodump

airodump-ng role literacy. Filter $LAB_SSID. Original Cyberlium.

airodump-ng is a flight recorder for 802.11 — record YOUR lab flight only.

airodump-ng writes capture files and live tables of APs/clients seen on a channel. In Cyberlium you run it only on YOUR lab AP channel with intent to filter $LAB_SSID / lab BSSID — not to catalog neighbor networks. Naming the tool is literacy; weaponized wardrive is out. Next: aircrack Roles.

1. Role: passive capture

airodump-ng listens on monitor iface for beacons, probes, data, and EAPOL — the latter matters later for handshake literacy on $LAB_SSID only.

Channel flag should match YOUR lab AP documented channel to minimize stranger frames.

Command guide

Try these commands — Role: passive capture

═══ TOOLS & WEBSITES ═══ Browse / read these (authorized learning only — stay in YOUR lab / program scope)

airodump-ng — https://www.aircrack-ng.org/doku.php?id=airodump-ng Wireshark capture — https://www.wireshark.org/

═══ INSTALL ═══

Linux (Debian/Ubuntu):

Command — copy this

sudo apt install aircrack-ng
sudo apt install network-manager

macOS: Prefer Kali VM Use airport / System Settings

Windows: Use Kali VM Use netsh wlan (built-in)

═══ LINUX / macOS ═══

Command — copy this

nmcli -f SSID,BSSID,CHAN,SIGNAL device wifi list 2>/dev/null | head -20
sudo timeout 8 airodump-ng --write /tmp/cyberlium-lab-scan --output-format csv wlan0 2>/dev/null || echo 'airodump-ng: YOUR lab adapter + YOUR lab ESSID notes only'

Primary tools to practice this lesson: airodump-ng, nmcli. Reference sites: airodump-ng (https://www.aircrack-ng.org/doku.php?id=airodump-ng); Wireshark capture (https://www.wireshark.org/). Run every command in the box — install first, then the usage lines — only on YOUR lab / program scope.

2. Output discipline

Live table lists all visible BSSIDs — do not log neighbor rows in shipped notes. Capture files may contain leaks — filter/delete per RoE before archiving.

Defenders use full sensors on owned airspace; you mimic filtered scope on desk lab.

3. No deauth pairing here

Tutorials pairing aireplay deauth with airodump on strangers are forbidden. Cyberlium does not teach deauth spam on café APs.

Ship: airodump role sentence + $LAB_SSID filter rule. Next: aircrack Roles.

4. What you ship: airodump-ng role + filter rule

Passive capture role. Channel = lab AP. Analyze only $LAB_SSID BSSID. No neighbor catalog. chmod 600.

5. What you record before the next lesson

Date. airodump-ng role. $LAB_SSID filter. File t15-m05-l02-airodump.txt chmod 600.

6. Wrong vs right: stranger SSIDs vs YOUR lab AP

Worked failure — same MSF word, opposite target. Right never needs a café Wi-Fi or classmate laptop.

Wrong: airodump-ng on channel 1 listing all dorm APs as lab grade. Pair with deauth on café.
Right: Document airodump role with $LAB_SSID filter. Next: aircrack Roles.

Hands-on Exercise

Mission: airodump-ng scope sentence

1) Explain passive capture role. 2) Write channel + BSSID filter for $LAB_SSID. 3) State deauth pairing is out of scope. Never wardrive with airodump.

Pro Tip

Stuck? Ask Cyberlium AI Mentor

BSSID filter in analysis tools beats trusting ESSID alone — clones exist.

Practice QuizQuestion 1

Multiple choice

APPLY: airodump-ng is primarily for:

Practice QuizQuestion 2

True or False

APPLY: True or False: Listing every neighbor AP in lab notes is acceptable.

Practice QuizQuestion 3

Multiple choice

APPLY: Cyberlium forbids pairing airodump with: