Re: Capturing FCS error frames using b43 driver

2009-02-22 Thread Francesco Gringoli

On Feb 22, 2009, at 2:42 PM, Gábor Stefanik wrote:

> On Sun, Feb 22, 2009 at 1:22 PM, Francesco Gringoli
>  wrote:
>> On Feb 17, 2009, at 11:54 PM, Michael Buesch wrote:
>>
>>> Please read the code. There are lots of sanity checks in b43 and
>>> mac80211
>>> that make it impossible to receive completely corrupted frames.
>> I reconsidered this message because I too did some tests in capturing
>> frames with proprietary firmware. As Bo said, we can capture  
>> corrupted
>> frames with R351 but we can't with R410. The reason is that this
>> firmware seems to not even check whether or not bit
>> B43_MACCTL_KEEP_BAD is set so I believe no kernel patch could correct
>> this problem, because it is on the firmware side.
>>
>> Cheers,
>> -FG
>>
>
> Does OpenFWWF or Michael's openfw honor KEEP_BAD?
openfwwf does honor the bit.

Cheers,
-FG

>
>
> -- 
> Vista: [V]iruses, [I]ntruders, [S]pyware, [T]rojans and [A]dware. :-)

---

Francesco Gringoli, PhD - Assistant Professor
Dept. of Electrical Engineering for Automation
University of Brescia
via Branze, 38
25123 Brescia
ITALY

Ph:  ++39.030.3715843
FAX: ++39.030.380014
WWW: http://www.ing.unibs.it/~gringoli




___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-22 Thread Gábor Stefanik
On Sun, Feb 22, 2009 at 1:22 PM, Francesco Gringoli
 wrote:
> On Feb 17, 2009, at 11:54 PM, Michael Buesch wrote:
>
>> Please read the code. There are lots of sanity checks in b43 and
>> mac80211
>> that make it impossible to receive completely corrupted frames.
> I reconsidered this message because I too did some tests in capturing
> frames with proprietary firmware. As Bo said, we can capture corrupted
> frames with R351 but we can't with R410. The reason is that this
> firmware seems to not even check whether or not bit
> B43_MACCTL_KEEP_BAD is set so I believe no kernel patch could correct
> this problem, because it is on the firmware side.
>
> Cheers,
> -FG
>

Does OpenFWWF or Michael's openfw honor KEEP_BAD?

-- 
Vista: [V]iruses, [I]ntruders, [S]pyware, [T]rojans and [A]dware. :-)
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-22 Thread Francesco Gringoli
On Feb 17, 2009, at 11:54 PM, Michael Buesch wrote:

> Please read the code. There are lots of sanity checks in b43 and  
> mac80211
> that make it impossible to receive completely corrupted frames.
I reconsidered this message because I too did some tests in capturing  
frames with proprietary firmware. As Bo said, we can capture corrupted  
frames with R351 but we can't with R410. The reason is that this  
firmware seems to not even check whether or not bit  
B43_MACCTL_KEEP_BAD is set so I believe no kernel patch could correct  
this problem, because it is on the firmware side.

Cheers,
-FG


>
>
> On Tuesday 17 February 2009 23:05:51 Bo Han wrote:
>> Hi,
>>
>> I am interested in capturing FCS error frames using b43 driver.  My  
>> hardware
>> information is as follows.
>>
>> b43-phy9: Broadcom 4318 WLAN found
>> b43-phy9 debug: Found PHY: Analog 3, Type 2, Revision 7
>> b43-phy9 debuf: Found Radio: Manuf 0x17f, Version 0x2050, Revision 8
>>
>> I am using firmware version 410.2160 with linux kernel version  
>> 2.6.27.10.  I
>> told the firmware to keep the bad frames by setting ctl |=
>> B43_MACCTL_KEEP_BAD just before b43_write32(dev, b43_MMIO_MACCTL,  
>> ctl) in
>> b43_adjust_mode(...) in main.c.
>> From b43_rx(...) in xmit.c, I can only see packets dropped because  
>> their
>> rate_idx == -1.  The length of all the dropped packets is 80 bytes  
>> and they
>> look like the following:
>>
>> 8fae 0308  0b01 0085  1500 482c
>> 50b3 0b01 0085  5fa0 1500 482c 50b3
>>  0003 850b cdcc 1b00 1d00 b945 c0cd
>> b905 630a 5e10 0101 0601 0b06 000b 07d6
>> bab9 addb 35fd 33e8 cd8f 8eaa 6f77 b9e8
>>
>> However, there is still no packet received with macstat  
>> B43_RX_MAC_FCSERR.
>> I also tried the 351 firmware for which I saw several FCS error  
>> frames in
>> PIO mode.  But the sniffing tools like Wireshark cannot get any  
>> packets.
>> including the correct ones, when using that firmware.
>>
>> Am I missing something?
>>
>> Thanks,
>> -Bo
>>
>
>
>
> -- 
> Greetings, Michael.
> ___
> Bcm43xx-dev mailing list
> Bcm43xx-dev@lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/bcm43xx-dev

---

Francesco Gringoli, PhD - Assistant Professor
Dept. of Electrical Engineering for Automation
University of Brescia
via Branze, 38
25123 Brescia
ITALY

Ph:  ++39.030.3715843
FAX: ++39.030.380014
WWW: http://www.ing.unibs.it/~gringoli




___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-18 Thread Michael Buesch
On Wednesday 18 February 2009 12:51:13 Francesco Gringoli wrote:
> >> - is that correct to have status.rate_idx filled by functions
> >> b43_plcp_get_bitrate_idx_ofdm and b43_plcp_get_bitrate_idx_cck that
> >> compute those values reading the plcp?
> >
> > Yes I think so. This seems to be the best way to do it.
> After some thoughts I'm wondering how these fields could be wrong  
> since the PLCP is protected on its own by another checksum external to  
> MPDU.

Yes you're right.

> Probably the firmware keep also frames whose PLCP is wrong,   
> while b43_rx only check for FCS problems within the MPDU. Will  
> investigate.

Well, there is a bug that misaligned frames are sometimes passed up to the 
driver.
It happens with any firmware and any driver (including open fw).
So it might be a silicon bug in the DMA. I'm not sure yet.

So you'll hit the rate_idx failure from time to time. That's expected and 
nonfatal.
It just happens for one packet of say 1000. I don't really know.

> > If the PLCP header is corrupt you're completely fucked anyway.
> > It is a basic and safe assumption that the PLCP header is correct.
> > But it shouldn't _crash_ if it's not correct. But I think it doesn't.
> Well, I think that capturing noisy frames is interesting for all those  
> guys willing to use data for research purposes without buying a  
> network analyzer that basically do the same...

Note that the PLCP is casted into hardware. You cannot change it or else
you will corrupt basic assumptions in the radio silicon.
So you better not touch it or buy a radio analyzer.
That's simply a limitation of the consumer hardware.

> > These warnings were removed some time ago. Please update your kernel.
> Uhm... I updated it before writing this mail to check about this  
> possibility but I believed these warns were still there
> 
> [taken from __ieee80211_rx() pulled from git yesterday night]
>  if (status->flag & RX_FLAG_HT) {
>  /* rate_idx is MCS index */
>  if (WARN_ON(status->rate_idx < 0 ||
>  status->rate_idx >= 76))
>  return;
>  /* HT rates are not in the table - use the highest  
> legacy rate
>   * for now since other parts of mac80211 may not yet  
> be fully
>   * MCS aware. */
>  rate = &sband->bitrates[sband->n_bitrates - 1];
>  } else {
>  if (WARN_ON(status->rate_idx < 0 ||
>  status->rate_idx >= sband->n_bitrates))
>  return;
>  rate = &sband->bitrates[status->rate_idx];
>  }

Ok, well. I don't know about mac80211. But the warnings in b43 were removed
(also some warnings were removed in mac80211).

I think these warnings should also be removed. You can do patches and send
them to Johannes.

-- 
Greetings, Michael.
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-18 Thread Francesco Gringoli

On Feb 18, 2009, at 11:15 AM, Michael Buesch wrote:

> On Wednesday 18 February 2009 03:33:01 Francesco Gringoli wrote:
>> On Feb 18, 2009, at 12:23 AM, Michael Buesch wrote:
>>
>>> On Wednesday 18 February 2009 00:07:56 Bo Han wrote:
 I think I am working on the first sanity check in the driver, but
 still
 cannot see any FCS error frames.  Is setting B43_MACCTL_KEEP_BAD
 the only
 thing we need to do for the firmware?
>>>
>>> No. I suggest you don't touch that flag anyway and change the
>>> corresponding
>>> mac80211 filter flag. You most likely can do that through cfg80211/
>>> nl80211/iw.
>>> It will take care to set the b43 flag.
>>
>> Michael is right, the new iw interface eases all this stuff.
>>
>> There are however a few points that should be discussed
>>
>> - why b43_rx(...) (in xmit.c) does not mark the status with
>> RX_FLAG_FAILED_FCS_CRC when the firmware reports a B43_RX_MAC_FCSERR:
>> IMHO this should be done to prevent mac80211 to be corrupted and  
>> crash
>> the pc when a _very_ noisy frame arrives
>
> Well, I think the mac80211 flag was invented afterwards. Remember  
> that b43
> was the first mac80211 driver ever and quite a few things didn't  
> exist when
> I ported the stuff.
>
> So do you care to send a patch?
ok, I will send.
>
>
> Anyway, could you elaborate why you think it would _crash_? I think  
> it shouldn't
> crash in any case.
No. But I have to analyze more because I think there is a problem with  
the firmware too (all firmwares) that not always sets up correctly the  
corrupted frame flag when the KEEP_BAD_FRAME bit is activated. I will  
check this and what happens when KEEP_BAD_FRAME is set and we have a  
mistake even at the plcp sublayer (see below).

However, if RX_FLAG_FAILED_FCS_CRC is not set up in the status field,  
mac80211 will process this frame: should not be something related to  
the skb, probably somewhere it is shortened without checking its  
actual size, as mac80211 trusts the driver that should already had  
checked that the skb size correspond to something written in some  
header, well, just speculating, I'm confused about.

>> - is that correct to have status.rate_idx filled by functions
>> b43_plcp_get_bitrate_idx_ofdm and b43_plcp_get_bitrate_idx_cck that
>> compute those values reading the plcp?
>
> Yes I think so. This seems to be the best way to do it.
After some thoughts I'm wondering how these fields could be wrong  
since the PLCP is protected on its own by another checksum external to  
MPDU. Probably the firmware keep also frames whose PLCP is wrong,  
while b43_rx only check for FCS problems within the MPDU. Will  
investigate.
>
>
>> When a frame is ok, values are
>> correct and mac80211 uses them without problems. If instead the frame
>> is not ok, then mac80211 can warn a lot of message because values are
>> out of range.
>
> If the PLCP header is corrupt you're completely fucked anyway.
> It is a basic and safe assumption that the PLCP header is correct.
> But it shouldn't _crash_ if it's not correct. But I think it doesn't.
Well, I think that capturing noisy frames is interesting for all those  
guys willing to use data for research purposes without buying a  
network analyzer that basically do the same...

> So if you crank up the flags to pass PLCP corrupted frames it's kind  
> of
> expected that they are dropped somewhere in the driver, because we  
> cannot
> trust the contents of the frame anyway.
> How do we know the PLCP length field is still correct for a  
> corrupted PLCP?
> So we don't even know if the frame would have the correct length.
>
>> Should not we parse these values when FCS is bad and
>> sanitize them if out of range so that dmesg does not get filled with
>> warnings?
>
> These warnings were removed some time ago. Please update your kernel.
Uhm... I updated it before writing this mail to check about this  
possibility but I believed these warns were still there

[taken from __ieee80211_rx() pulled from git yesterday night]
 if (status->flag & RX_FLAG_HT) {
 /* rate_idx is MCS index */
 if (WARN_ON(status->rate_idx < 0 ||
 status->rate_idx >= 76))
 return;
 /* HT rates are not in the table - use the highest  
legacy rate
  * for now since other parts of mac80211 may not yet  
be fully
  * MCS aware. */
 rate = &sband->bitrates[sband->n_bitrates - 1];
 } else {
 if (WARN_ON(status->rate_idx < 0 ||
 status->rate_idx >= sband->n_bitrates))
 return;
 rate = &sband->bitrates[status->rate_idx];
 }

>
>
>> Or probably there is another method to get those values,
>> e.g., the firmware can provide them reading from the radio instead of
>> computing them reading fields from the plcp?
>
> I don't see why this is necessary and how it would be poss

Re: Capturing FCS error frames using b43 driver

2009-02-18 Thread Michael Buesch
On Wednesday 18 February 2009 03:33:01 Francesco Gringoli wrote:
> On Feb 18, 2009, at 12:23 AM, Michael Buesch wrote:
> 
> > On Wednesday 18 February 2009 00:07:56 Bo Han wrote:
> >> I think I am working on the first sanity check in the driver, but  
> >> still
> >> cannot see any FCS error frames.  Is setting B43_MACCTL_KEEP_BAD  
> >> the only
> >> thing we need to do for the firmware?
> >
> > No. I suggest you don't touch that flag anyway and change the  
> > corresponding
> > mac80211 filter flag. You most likely can do that through cfg80211/ 
> > nl80211/iw.
> > It will take care to set the b43 flag.
> 
> Michael is right, the new iw interface eases all this stuff.
> 
> There are however a few points that should be discussed
> 
> - why b43_rx(...) (in xmit.c) does not mark the status with  
> RX_FLAG_FAILED_FCS_CRC when the firmware reports a B43_RX_MAC_FCSERR:  
> IMHO this should be done to prevent mac80211 to be corrupted and crash  
> the pc when a _very_ noisy frame arrives

Well, I think the mac80211 flag was invented afterwards. Remember that b43
was the first mac80211 driver ever and quite a few things didn't exist when
I ported the stuff.

So do you care to send a patch?

Anyway, could you elaborate why you think it would _crash_? I think it shouldn't
crash in any case.

> - is that correct to have status.rate_idx filled by functions  
> b43_plcp_get_bitrate_idx_ofdm and b43_plcp_get_bitrate_idx_cck that  
> compute those values reading the plcp?

Yes I think so. This seems to be the best way to do it.

> When a frame is ok, values are   
> correct and mac80211 uses them without problems. If instead the frame  
> is not ok, then mac80211 can warn a lot of message because values are  
> out of range.

If the PLCP header is corrupt you're completely fucked anyway.
It is a basic and safe assumption that the PLCP header is correct.
But it shouldn't _crash_ if it's not correct. But I think it doesn't.

So if you crank up the flags to pass PLCP corrupted frames it's kind of
expected that they are dropped somewhere in the driver, because we cannot
trust the contents of the frame anyway.
How do we know the PLCP length field is still correct for a corrupted PLCP?
So we don't even know if the frame would have the correct length.

> Should not we parse these values when FCS is bad and   
> sanitize them if out of range so that dmesg does not get filled with  
> warnings?

These warnings were removed some time ago. Please update your kernel.

> Or probably there is another method to get those values,   
> e.g., the firmware can provide them reading from the radio instead of  
> computing them reading fields from the plcp?

I don't see why this is necessary and how it would be possible.

> - I noticed that when in monitor mode and when set up to keep bad  
> frames, the radiotap header is not reporting FCS wrong for malformed  
> or corrupted frame as it should be, is that correct? Should not the  
> radiotap header be built on the status filled by first the driver then  
> mac80211?

I neither know nor care. If you do, please send patches.

-- 
Greetings, Michael.
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-17 Thread Francesco Gringoli
On Feb 18, 2009, at 12:23 AM, Michael Buesch wrote:

> On Wednesday 18 February 2009 00:07:56 Bo Han wrote:
>> I think I am working on the first sanity check in the driver, but  
>> still
>> cannot see any FCS error frames.  Is setting B43_MACCTL_KEEP_BAD  
>> the only
>> thing we need to do for the firmware?
>
> No. I suggest you don't touch that flag anyway and change the  
> corresponding
> mac80211 filter flag. You most likely can do that through cfg80211/ 
> nl80211/iw.
> It will take care to set the b43 flag.

Michael is right, the new iw interface eases all this stuff.

There are however a few points that should be discussed

- why b43_rx(...) (in xmit.c) does not mark the status with  
RX_FLAG_FAILED_FCS_CRC when the firmware reports a B43_RX_MAC_FCSERR:  
IMHO this should be done to prevent mac80211 to be corrupted and crash  
the pc when a _very_ noisy frame arrives

- is that correct to have status.rate_idx filled by functions  
b43_plcp_get_bitrate_idx_ofdm and b43_plcp_get_bitrate_idx_cck that  
compute those values reading the plcp? When a frame is ok, values are  
correct and mac80211 uses them without problems. If instead the frame  
is not ok, then mac80211 can warn a lot of message because values are  
out of range. Should not we parse these values when FCS is bad and  
sanitize them if out of range so that dmesg does not get filled with  
warnings? Or probably there is another method to get those values,  
e.g., the firmware can provide them reading from the radio instead of  
computing them reading fields from the plcp?

- I noticed that when in monitor mode and when set up to keep bad  
frames, the radiotap header is not reporting FCS wrong for malformed  
or corrupted frame as it should be, is that correct? Should not the  
radiotap header be built on the status filled by first the driver then  
mac80211?

Cheers,
-FG



>
>
> -- 
> Greetings, Michael.
> ___
> Bcm43xx-dev mailing list
> Bcm43xx-dev@lists.berlios.de
> https://lists.berlios.de/mailman/listinfo/bcm43xx-dev

---

Francesco Gringoli, PhD - Assistant Professor
Dept. of Electrical Engineering for Automation
University of Brescia
via Branze, 38
25123 Brescia
ITALY

Ph:  ++39.030.3715843
FAX: ++39.030.380014
WWW: http://www.ing.unibs.it/~gringoli




___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-17 Thread Michael Buesch
On Wednesday 18 February 2009 00:07:56 Bo Han wrote:
> I think I am working on the first sanity check in the driver, but still
> cannot see any FCS error frames.  Is setting B43_MACCTL_KEEP_BAD the only
> thing we need to do for the firmware?

No. I suggest you don't touch that flag anyway and change the corresponding
mac80211 filter flag. You most likely can do that through cfg80211/nl80211/iw.
It will take care to set the b43 flag.

-- 
Greetings, Michael.
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-17 Thread Bo Han
I think I am working on the first sanity check in the driver, but still
cannot see any FCS error frames.  Is setting B43_MACCTL_KEEP_BAD the only
thing we need to do for the firmware?

Thanks,
-Bo

On Tue, Feb 17, 2009 at 5:54 PM, Michael Buesch  wrote:

> Please read the code. There are lots of sanity checks in b43 and mac80211
> that make it impossible to receive completely corrupted frames.
>
> On Tuesday 17 February 2009 23:05:51 Bo Han wrote:
> > Hi,
> >
> > I am interested in capturing FCS error frames using b43 driver.  My
> hardware
> > information is as follows.
> >
> > b43-phy9: Broadcom 4318 WLAN found
> > b43-phy9 debug: Found PHY: Analog 3, Type 2, Revision 7
> > b43-phy9 debuf: Found Radio: Manuf 0x17f, Version 0x2050, Revision 8
> >
> > I am using firmware version 410.2160 with linux kernel version 2.6.27.10.
>  I
> > told the firmware to keep the bad frames by setting ctl |=
> > B43_MACCTL_KEEP_BAD just before b43_write32(dev, b43_MMIO_MACCTL, ctl) in
> > b43_adjust_mode(...) in main.c.
> > From b43_rx(...) in xmit.c, I can only see packets dropped because their
> > rate_idx == -1.  The length of all the dropped packets is 80 bytes and
> they
> > look like the following:
> >
> > 8fae 0308  0b01 0085  1500 482c
> > 50b3 0b01 0085  5fa0 1500 482c 50b3
> >  0003 850b cdcc 1b00 1d00 b945 c0cd
> > b905 630a 5e10 0101 0601 0b06 000b 07d6
> > bab9 addb 35fd 33e8 cd8f 8eaa 6f77 b9e8
> >
> > However, there is still no packet received with macstat
> B43_RX_MAC_FCSERR.
> > I also tried the 351 firmware for which I saw several FCS error frames in
> > PIO mode.  But the sniffing tools like Wireshark cannot get any packets.
> > including the correct ones, when using that firmware.
> >
> > Am I missing something?
> >
> > Thanks,
> > -Bo
> >
>
>
>
> --
> Greetings, Michael.
>
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Re: Capturing FCS error frames using b43 driver

2009-02-17 Thread Michael Buesch
Please read the code. There are lots of sanity checks in b43 and mac80211
that make it impossible to receive completely corrupted frames.

On Tuesday 17 February 2009 23:05:51 Bo Han wrote:
> Hi,
> 
> I am interested in capturing FCS error frames using b43 driver.  My hardware
> information is as follows.
> 
> b43-phy9: Broadcom 4318 WLAN found
> b43-phy9 debug: Found PHY: Analog 3, Type 2, Revision 7
> b43-phy9 debuf: Found Radio: Manuf 0x17f, Version 0x2050, Revision 8
> 
> I am using firmware version 410.2160 with linux kernel version 2.6.27.10.  I
> told the firmware to keep the bad frames by setting ctl |=
> B43_MACCTL_KEEP_BAD just before b43_write32(dev, b43_MMIO_MACCTL, ctl) in
> b43_adjust_mode(...) in main.c.
> From b43_rx(...) in xmit.c, I can only see packets dropped because their
> rate_idx == -1.  The length of all the dropped packets is 80 bytes and they
> look like the following:
> 
> 8fae 0308  0b01 0085  1500 482c
> 50b3 0b01 0085  5fa0 1500 482c 50b3
>  0003 850b cdcc 1b00 1d00 b945 c0cd
> b905 630a 5e10 0101 0601 0b06 000b 07d6
> bab9 addb 35fd 33e8 cd8f 8eaa 6f77 b9e8
> 
> However, there is still no packet received with macstat B43_RX_MAC_FCSERR.
> I also tried the 351 firmware for which I saw several FCS error frames in
> PIO mode.  But the sniffing tools like Wireshark cannot get any packets.
> including the correct ones, when using that firmware.
> 
> Am I missing something?
> 
> Thanks,
> -Bo
> 



-- 
Greetings, Michael.
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Capturing FCS error frames using b43 driver

2009-02-17 Thread Bo Han
Hi,

(It seems that my last email was incomplete.)

I am interested in capturing FCS error frames using b43 driver.  My hardware
information is as follows.

b43-phy9: Broadcom 4318 WLAN found
b43-phy9 debug: Found PHY: Analog 3, Type 2, Revision 7
b43-phy9 debuf: Found Radio: Manuf 0x17f, Version 0x2050, Revision 8

I am using firmware version 410.2160 with linux kernel version 2.6.27.10.  I
told the firmware to keep the bad frames by setting ctl |=
B43_MACCTL_KEEP_BAD just before b43_write32(dev, b43_MMIO_MACCTL, ctl) in
b43_adjust_mode(...) in main.c.
>From b43_rx(...) in xmit.c, I can only see packets dropped because their
rate_idx == -1.  The length of all the dropped packets is 80 bytes and they
look like the following:

8fae 0308  0b01 0085  1500 482c
50b3 0b01 0085  5fa0 1500 482c 50b3
 0003 850b cdcc 1b00 1d00 b945 c0cd
b905 630a 5e10 0101 0601 0b06 000b 07d6
bab9 addb 35fd 33e8 cd8f 8eaa 6f77 b9e8

However, there is still no packet received with macstat B43_RX_MAC_FCSERR.
I also tried the 351 firmware for which I saw several FCS error frames in
PIO mode.  But the sniffing tools like Wireshark cannot get any packets.
including the correct ones, when using that firmware.

Am I missing something?

Thanks,
-Bo
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev


Capturing FCS error frames using b43 driver

2009-02-17 Thread Bo Han
Hi,

I am interested in capturing FCS error frames using b43 driver.  My hardware
information is as follows.

b43-phy9: Broadcom 4318 WLAN found
b43-phy9 debug: Found PHY: Analog 3, Type 2, Revision 7
b43-phy9 debuf: Found Radio: Manuf 0x17f, Version 0x2050, Revision 8

I am using firmware version 410.2160 with linux kernel version 2.6.27.10.  I
told the firmware to keep the bad frames by setting ctl |=
B43_MACCTL_KEEP_BAD just before b43_write32(dev, b43_MMIO_MACCTL, ctl) in
b43_adjust_mode(...) in main.c.
>From b43_rx(...) in xmit.c, I can only see packets dropped because their
rate_idx == -1.  The length of all the dropped packets is 80 bytes and they
look like the following:

8fae 0308  0b01 0085  1500 482c
50b3 0b01 0085  5fa0 1500 482c 50b3
 0003 850b cdcc 1b00 1d00 b945 c0cd
b905 630a 5e10 0101 0601 0b06 000b 07d6
bab9 addb 35fd 33e8 cd8f 8eaa 6f77 b9e8

However, there is still no packet received with macstat B43_RX_MAC_FCSERR.
I also tried the 351 firmware for which I saw several FCS error frames in
PIO mode.  But the sniffing tools like Wireshark cannot get any packets.
including the correct ones, when using that firmware.

Am I missing something?

Thanks,
-Bo
___
Bcm43xx-dev mailing list
Bcm43xx-dev@lists.berlios.de
https://lists.berlios.de/mailman/listinfo/bcm43xx-dev