Kali Linux Wireless Penetration Testing Cookbook

Phase three – capturing IVs

Now that we have come this far, we need to let her rip and start capturing those tasty IVs. We do this by using airodump to help us capture this precious information.

Open a second console session and leave the previous one open to capture the generated IVs. Then, enter:

airodump-ng -c 9 --bssid 00:28:6C:E4:40:80 -w output wlan0--bssid 00:14:6C:7E:40:80 is the access point MAC address. This eliminate extraneous traffic. 
-w capture is file name prefix for the file which will contain the IVs. 

While the injection is being carried out, the screen will look similar to this:

 CH 9 ][ Elapsed: 8 mins ][ 2007-03-21 19:25 BSSID PWR RXQ Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID 00:14:6C:7E:40:80 42 100 5240 178307 ...