> Can you please capture a beacon from this AP for me? > That is, one line from the output of: > > tcpdump -n -i iwm0 -y IEEE802_11_RADIO -s 1500 -vvv subtype beacon > > where the SSID of the beacon matches your AP, and while the iwm0 > interface is associated in 11b mode or while it is scanning. > > Thanks. >
Yep, needs a littlebit to find the device. The ssid is correct and checked based on the MAC adress of the device. # ifconfig iwm0 scan iwm0: flags=8943<UP,BROADCAST,RUNNING,PROMISC,SIMPLEX,MULTICAST> mtu 1500 lladdr cc:3d:82:52:2b:5a priority: 4 groups: wlan media: IEEE802.11 autoselect mode 11b status: no network ieee80211: nwid TP-LINK_M7350_6D1625 wpakey 0x15e08e2fd1fb0c86efe13dd3878a80395bb91315a49ff70fb9cdfbab7d4d5f14 wpaprotos wpa1,wpa2 wpaakms psk wpaciphers tkip,ccmp wpagroupcipher tkip nwid 0x0000000000000000000000000000000000000000 chan 6 bssid 3c:46:d8:6d:16:25 100% 54M privacy,short_preamble,short_slottime,wpa2 nwid AND SO ON ... The beacon : 17:03:22.158084 802.11 flags=0<>: beacon, timestamp 4390707584, interval 100, caps=2061<ESS,PRIVACY,SHORT_PREAMBLE,SHORT_SLOTTIME>, ssid 0x0000000000000000000000000000000000000000, rates 1M 2M 5M 6M 9M 11M 12M 18M, ds (chan 6), tim 0x01020000, erp 0x00, xrates 24M 36M 48M 54M, htcaps=<20/40MHz,SGI@20MHz,SGI@40MHz,A-MSDU 3839,DSSS/CCK@40MHz,A-MPDU max 8191,RxMCS 0xffff0000000000000000>, htop=<40MHz chan 6:5,protect non-HT,basic MCS set 0x0000000000000000>, vendor 0x0050f20101000050f20202000050f2040050f20201000050f202, rsn 0x0100000fac020200000fac04000fac020100000fac020c00, vendor 0x0050f2020101800003a4000027a4000042435e0062322f00, 74:14 0x14000a002c01c800140005001900, 127:1 0x01, vendor 0x0050f204104a0001101044000102, <radiotap v0, tsf 10997211, 1Mbit/s, chan 6, 11g, sig 67dBm, noise 0dBm> 17:03:22.352092 802.11 flags=0<>: beacon, timestamp 1802032436154, interval 100, caps=2021<ESS,PRIVACY,SHORT_SLOTTIME>, ssid (PBS-445EF9), rates 1M 2M 5M 11M 18M 24M 36M 54M, ds (chan 11), tim 0x01020000, country 'EU ', erp 0x00, 47:1 0x00, xrates 6M 9M 12M 48M, htcaps=<20MHz,greenfield,SGI@20MHz,SGI@40MHz,A-MSDU 7935,DSSS/CCK@40MHz,A-MPDU max 65535,A-MPDU spacing 8.00us,RxMCS 0xffff0000000000000000>, htop=<20MHz chan 11,STA chanw 20MHz,RIFS,non-greenfield STA,basic MCS set 0x0000000000000000>, vendor 0x0010180201f02c0000, vendor 0x0050f20101000050f20202000050f2040050f20201000050f2020c00, vendor 0x0050f2020101000003a4000027a4000042435e0062322f00, <radiotap v0, tsf 11191640, 1Mbit/s, chan 11, 11g, sig 22dBm, noise 0dBm>