I have read some articles describing that one can use the monitor mode on a NIC to do packet injection.
I really don't understand why I cannot just use the managed mode to forge the packets, and I can use another computer be a sniffer to sniff the packets.
Recently I tried two experiments:
- I tried to use Scapy to send the 802.11 probe response in managed mode. However, from the sniffer I cannot see the packets on the air.
- If instead I send with the 802.11 QoS packet, then the sniffer shows the packets.
What's the difference between these two cases? Is this because I don't use in monitor mode so I cannot send the probe response?