From: Brian Bender <bbender@vo...> - 2001-04-30 16:11:20
So, has anyone spent much time trying to get either of the airo
drivers to work in RFMON or RFMON_ANY_BSSID mode? I tried as
a quick hack (in Ben's driver) switching into RFMON mode in
airo_set_multicast_list() where the kernel tries to kick it into
promiscuous mode, and it seems to work briefly. But then the driver
starts tossing away most of the packets because they appear to be
bigger'n the driver was written to deal with (in the status & EV_RX
case, it's capped at 2k). I'm going to play around with this on my
own, but I just wondered if there'd been any effort in this area I
could build on, rather than starting relatively from scratch. If I can
get this to work, there's a free (speech _and_ beer) 802.11 sniffer
there for the compiling -- Ethereal supposedly already understands
802.11b, I just need to get the packets up to it.
I'm not _completely_ off base, am I?
- Brian Bender
Sr. Software Engineer
Pittsburgh, PA, USA
From: Javier Achirica <achirica@tt...> - 2001-05-03 21:48:50
> Benjamin Reed writes:
> | I am surprised Etherreal can handle 802.11 since the kernel support for
> | 802.11 packets seems rather unused. I'm in the same boat as Javier: it is
> | easy to put in, but will anyone use it? (When I say anyone, I mean will
> | any applications support it?)
> There is stuff on the web that gets this stuff into Ethereal and there
> is a module type support for Ethereal to get data in without going through
> the standard IP stack. This is for Linux, I'm looking at implementing it
> for FreeBSD but using our more generic netgraph infrastructure so then
> Ethereal could tap into that and with the right parser sniff frame relay,
> PPP, etc.
> I have to dig up the URL's since I don't have them handy.
Yes, please. I've been doing some tests and it's quite easy to add that
capability to the Linux driver. The worst part of it is how to interface
that with the kernel and the applications (libpcap doesn't seem quite
ready to handle it).