hi, I am trying the following experiment: 1. I am downloading file from my laptop through a file (say ubuntu ISO) and the AP is secure. 2. From two other machines, atheros card(AR922X) is used with ath9k driver on each. This card has one of its interfaces in adhoc mode, The other interface is in monitor mode. I am trying to monitor the traffic to the laptop. I keep seeing "*QoS data*" of size > 1500 bytes. This doesnt look like the actual data as for looking at packets from the two nodes with the same SN, I am unable to see similar data in the packets. Am I reading data from the laptop->AP link or am I reading some kind of broadcast data that comes to everyone. 3. The commands that i used to create the monitor interface: iw dev <device> interface add <monif> type monitor flags none iwconfig monif mode monitor iw dev <monif> set monitor fcsfail iw dev <monif> set monitor control ifconfig <monif> up where monif is the monitor interface, device is the actual device.
Is there a specific way to set the monitor interface to monitor external links. Also, I am able to capture data packets at LLC level and i could verify the data that the actual data is getting captured. I am unable to execute "tcpdump -i <monif> -I" the execution of command says the device cant work in monitor mode. Can someone suggest how to setup a monitor interface to monitor data across links in a channel? Looking forward to any reply. Thanks in advance! Thank you Srinivas
_______________________________________________ ath9k-devel mailing list ath9k-devel@lists.ath9k.org https://lists.ath9k.org/mailman/listinfo/ath9k-devel
