On Wed, Feb 26, 2003 at 05:01:34PM +0100, Michele Varesano wrote: > Hello, > I use ethereal 0.9.9 and libpcap 0.7.1 (RH7.3) with > a Cisco Aironet 350 wireless Card. I would like > to sniff all 802.11 frames (control, data and management > frames) but I can get only regular data frames with > ethereal. > > As reported in > http://www.ethereal.com/faq.html#q5.22 > I tried the following commands: > > echo "Mode: rfmon" >/proc/driver/aironet/ethN/Config > echo "Mode: y" >/proc/driver/aironet/ethN/Config > > with no results
Which driver are you using? Cisco apparently have Linux drivers, but I don't know whether they support monitor mode. Apparently the latest airo-linux drivers don't work all that well, but some older Aironet drivers do: http://www.ethereal.com/lists/ethereal-users/200302/msg00227.html It would be Amazingly Lovely if 1) the standard Linux trees from kernel.org had monitor-mode support for all wireless cards, rather than requiring people to dig up patches or drivers from elsewhere - or, at last, if the Linux kernel in most Linux distributions had it; 2) there were a standard way to do raw 802.11 captures that was the same for all of those cards. I don't know why there appear to be N different groups of people doing wireless drivers on Linux, often doing things in different ways (wlan-ng, Jean Tourrilhes' stuff, the Aironet stuff), but I suspect it's a bit of a pain for Linux users. The folks working on the NetBSD 802.11 drivers might well get some standardization of wireless stuff in NetBSD - and the FreeBSD folks are picking at least some of their stuff up, so that might be the case on two out of three of the free-software BSDs, and if OpenBSD picks it up that'd be wonderful. All that'd be needed in BSDland, then, would be for the fruit-flavored BSD from Cupertino to pick it up (which might make Wildpackets happy, too, as that'd mean they could do AiroPeek for MacOS X without having to do their own Airport drivers). (There might be some card-dependent things, as I think there are some things that some cards can do but not others, but it'd be nice to standardize the stuff that all cards can do....)