From owner-freebsd-questions@FreeBSD.ORG Wed Jun 14 12:17:45 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id EB70916A47A for ; Wed, 14 Jun 2006 12:17:44 +0000 (UTC) (envelope-from chris@vindaloo.com) Received: from corellia.vindaloo.com (corellia.vindaloo.com [64.51.148.100]) by mx1.FreeBSD.org (Postfix) with ESMTP id 3EA7843D46 for ; Wed, 14 Jun 2006 12:17:44 +0000 (GMT) (envelope-from chris@vindaloo.com) Received: from yavin.vindaloo.com (yavin.vindaloo.com [172.24.144.34]) by corellia.vindaloo.com (Postfix) with ESMTP id C30655CB1 for ; Wed, 14 Jun 2006 08:16:43 -0400 (EDT) Received: from dagobah.vindaloo.com (dagobah.vindaloo.com [172.24.145.68]) by yavin.vindaloo.com (Postfix) with ESMTP id 5320325387; Wed, 14 Jun 2006 08:17:42 -0400 (EDT) Received: from dagobah.vindaloo.com (localhost [127.0.0.1]) by dagobah.vindaloo.com (8.13.6/8.13.6) with ESMTP id k5ECGYqF001560; Wed, 14 Jun 2006 08:16:34 -0400 (EDT) (envelope-from chris@dagobah.vindaloo.com) Received: (from chris@localhost) by dagobah.vindaloo.com (8.13.6/8.13.6/Submit) id k5ECGWtH001559; Wed, 14 Jun 2006 08:16:32 -0400 (EDT) (envelope-from chris) Date: Wed, 14 Jun 2006 08:16:32 -0400 From: Christopher Sean Hilton To: freebsd-questions@freebsd.org Message-ID: <20060614121632.GB1225@dagobah.vindaloo.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="GvXjxJ+pjyke8COw" Content-Disposition: inline User-Agent: Mutt/1.4.2.1i Subject: Kismet and wi0 X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 14 Jun 2006 12:17:45 -0000 --GvXjxJ+pjyke8COw Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable I'm wondering if anyone else is having trouble with the combination between Kismet and the Orinoco Gold card. This setup worked flawlessly for me under FreeBSD 5.4 (I retested it last night) but I get no joy with FreeBSD 6.1-STABLE. Here's what I see: # ifconfig wi0 list ap Doesn't list any access points even when # wicontrol -i wi0 -l list both my and my neighbor's linksys. Once in a blue moon starting Kismet on FreeBSD 6.1-STABLE will find networks. In most cases it's deaf. Some info: dagobah chris $ uname -a FreeBSD dagobah.vindaloo.com 6.1-STABLE FreeBSD 6.1-STABLE #0: Tue Jun 13 1= 4:34:55 EDT 2006 root@dagobah:/usr/obj/usr/src/sys/GATEWAY_450ROG i386 dagobah chris $ dmesg=20 Copyright (c) 1992-2006 The FreeBSD Project. Copyright (c) 1979, 1980, 1983, 1986, 1988, 1989, 1991, 1992, 1993, 1994 The Regents of the University of California. All rights reserved. FreeBSD 6.1-STABLE #0: Tue Jun 13 14:34:55 EDT 2006 root@dagobah:/usr/obj/usr/src/sys/GATEWAY_450ROG WARNING: debug.mpsafenet forced to 0 as ipsec requires Giant WARNING: MPSAFE network stack disabled, expect reduced performance. Timecounter "i8254" frequency 1193182 Hz quality 0 CPU: Intel(R) Pentium(R) M processor 1400MHz (1395.48-MHz 686-class CPU) Origin =3D "GenuineIntel" Id =3D 0x695 Stepping =3D 5 Features=3D0xa7e9f9bf Features2=3D0x180 real memory =3D 536281088 (511 MB) avail memory =3D 515424256 (491 MB) acpi0: on motherboard acpi0: Power Button (fixed) Timecounter "ACPI-fast" frequency 3579545 Hz quality 1000 acpi_timer0: <24-bit timer at 3.579545MHz> port 0x1008-0x100b on acpi0 acpi_ec0: port 0x62,0x66 on acpi0 cpu0: on acpi0 est0: on cpu0 p4tcc0: on cpu0 pcib0: port 0xcf8-0xcff on acpi0 pci0: on pcib0 agp0: mem 0xe0000000-0xefffffff at device = 0.0 on pci0 pcib1: at device 1.0 on pci0 pci1: on pcib1 acpi_video0: port 0x3000-0x30ff mem 0xd8000000-0xdff= fffff,0xd0100000-0xd010ffff irq 11 at device 0.0 on pci1 uhci0: port 0x1800-0x181f irq 1= 1 at device 29.0 on pci0 uhci0: [GIANT-LOCKED] usb0: on uhci0 usb0: USB revision 1.0 uhub0: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub0: 2 ports with 2 removable, self powered uhci1: port 0x1820-0x183f irq 1= 1 at device 29.1 on pci0 uhci1: [GIANT-LOCKED] usb1: on uhci1 usb1: USB revision 1.0 uhub1: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub1: 2 ports with 2 removable, self powered uhci2: port 0x1840-0x185f irq 1= 0 at device 29.2 on pci0 uhci2: [GIANT-LOCKED] usb2: on uhci2 usb2: USB revision 1.0 uhub2: Intel UHCI root hub, class 9/0, rev 1.00/1.00, addr 1 uhub2: 2 ports with 2 removable, self powered ehci0: mem 0xd0000000-0xd0000= 3ff irq 10 at device 29.7 on pci0 ehci0: [GIANT-LOCKED] usb3: EHCI version 1.0 usb3: companion controllers, 2 ports each: usb0 usb1 usb2 usb3: on ehci0 usb3: USB revision 2.0 uhub3: Intel EHCI root hub, class 9/0, rev 2.00/1.00, addr 1 uhub3: 6 ports with 6 removable, self powered pcib2: at device 30.0 on pci0 pci2: on pcib2 em0: port 0x5000-0x= 503f mem 0xd0600000-0xd061ffff irq 11 at device 2.0 on pci2 em0: [GIANT-LOCKED] em0: Ethernet address: 00:e0:b8:5a:10:d2 pci2: at device 4.0 (no driver attached) cbb0: irq 10 at device 5.0 on pci2 cardbus0: on cbb0 pccard0: <16-bit PCCard bus> on cbb0 cbb1: irq 10 at device 5.1 on pci2 cardbus1: on cbb1 pccard1: <16-bit PCCard bus> on cbb1 fwohci0: mem 0xd0623000-0xd06237ff irq 11 at device 5.2 on p= ci2 fwohci0: [GIANT-LOCKED] fwohci0: OHCI version 1.0 (ROM=3D1) fwohci0: No. of Isochronous channels is 4. fwohci0: EUI64 00:e0:b8:04:50:01:ae:21 fwohci0: Phy 1394a available S400, 2 ports. fwohci0: Link S400, max_rec 2048 bytes. firewire0: on fwohci0 fwe0: on firewire0 if_fwe0: Fake Ethernet address: 02:e0:b8:01:ae:21 fwe0: Ethernet address: 02:e0:b8:01:ae:21 sbp0: on firewire0 fwohci0: Initiate bus reset fwohci0: node_id=3D0xc800ffc0, gen=3D1, CYCLEMASTER mode firewire0: 1 nodes, maxhop <=3D 0, cable IRM =3D 0 (me) firewire0: bus manager 0 (me) isab0: at device 31.0 on pci0 isa0: on isab0 atapci0: port 0x1f0-0x1f7,0x3f6,0x170-0x177= ,0x376,0x1860-0x186f at device 31.1 on pci0 ata0: on atapci0 ata1: on atapci0 pci0: at device 31.3 (no driver attached) pcm0: port 0x1c00-0x1cff,0x18c0-0x18ff mem 0xd0000c0= 0-0xd0000dff,0xd0000800-0xd00008ff irq 10 at device 31.5 on pci0 pcm0: pci0: at device 31.6 (no driver attached) acpi_lid0: on acpi0 acpi_acad0: on acpi0 battery0: on acpi0 battery1: on acpi0 acpi_button0: on acpi0 acpi_tz0: on acpi0 atkbdc0: port 0x60,0x64 irq 1 on acpi0 atkbd0: irq 1 on atkbdc0 kbd0 at atkbd0 atkbd0: [GIANT-LOCKED] psm0: irq 12 on atkbdc0 psm0: [GIANT-LOCKED] psm0: model Synaptics Touchpad, device ID 0 sio0: <16550A-compatible COM port> port 0x3f8-0x3ff irq 4 flags 0x10 on acp= i0 sio0: type 16550A pmtimer0 on isa0 orm0: at iomem 0xc0000-0xcffff on isa0 ppc0: parallel port not found. sc0: at flags 0x100 on isa0 sc0: VGA <16 virtual consoles, flags=3D0x300> sio1: configured irq 3 not in bitmap of probed irqs 0 sio1: port may not be enabled vga0: at port 0x3c0-0x3df iomem 0xa0000-0xbffff on isa0 uhub4: vendor 0x0451 General Purpose USB Hub, class 9/0, rev 1.10/1.01, add= r 2 uhub4: 2 ports with 1 removable, bus powered ukbd0: Logitech USB Receiver, rev 1.10/22.40, addr 3, iclass 3/1 kbd1 at ukbd0 ums0: Logitech USB Receiver, rev 1.10/22.40, addr 3, iclass 3/1 ums0: 8 buttons and Z dir. Timecounter "TSC" frequency 1395479552 Hz quality 800 Timecounters tick every 1.000 msec IPsec: Initialized Security Association Processing. ad0: 57231MB at ata0-master UDMA100 uhid0: Logitech Desktop USB stand, rev 1.10/41.02, addr 4, iclass 3/0 Trying to mount root from ufs:/dev/ad0s4a mount option is unknown mount option is unknown wi0: at port 0x4000-0x403f irq 10 functi= on 0 config 1 on pccard1 wi0: [GIANT-LOCKED] wi0: using Lucent Technologies, WaveLAN/IEEE wi0: Lucent Firmware: Station (7.28.1) wi0: Ethernet address: 00:02:2d:37:73:0c wi0: promiscuous mode disabled wi0: link state changed to DOWN wi0: promiscuous mode disabled wi0: promiscuous mode disabled wi0: detached wi0: at port 0x4000-0x403f irq 10 functi= on 0 config 1 on pccard1 wi0: [GIANT-LOCKED] wi0: using Lucent Technologies, WaveLAN/IEEE wi0: Lucent Firmware: Station (7.28.1) wi0: Ethernet address: 00:02:2d:37:73:0c wi0: promiscuous mode disabled kismet.conf # Kismet config file # Most of the "static" configs have been moved to here -- the command line # config was getting way too crowded and cryptic. We want functionality, # not continually reading --help! # Version of Kismet config version=3D2005.06.R1 # Name of server (Purely for organizational purposes) servername=3DKismet # User to setid to (should be your normal user) suiduser=3Dchris # Sources are defined as: # source=3Dsourcetype,interface,name[,initialchannel] # Source types and required drivers are listed in the README under the # CAPTURE SOURCES section. # The initial channel is optional, if hopping is not enabled it can be used # to set the channel the interface listens on. # YOU MUST CHANGE THIS TO BE THE SOURCE YOU WANT TO USE #source=3Dnone,none,addme source=3Dradiotap_bsd_b,wi0,Orinoco # source=3Dradiotap_bsd_b,ipw0,Intel # Comma-separated list of sources to enable. This is only needed if you de= fined # multiple sources and only want to enable some of them. By default, all d= efined # sources are enabled. # For example: # enablesources=3Dprismsource,ciscosource # Do we channelhop? channelhop=3Dtrue # How many channels per second do we hop? (1-10) channelvelocity=3D1 # By setting the dwell time for channel hopping we override the channelvelo= city # setting above and dwell on each channel for the given number of seconds. # channeldwell=3D5 # Do we split channels between cards on the same spectrum? This means if= =20 # multiple 802.11b capture sources are defined, they will be offset to cover # the most possible spectrum at a given time. This also controls splitting # fine-tuned sourcechannels lines which cover multiple interfaces (see belo= w) channelsplit=3Dtrue # Basic channel hopping control: # These define the channels the cards hop through for various frequency ran= ges # supported by Kismet. More finegrain control is available via the=20 # "sourcechannels" configuration option. #=20 # Don't change the IEEE80211 identifiers or channel hopping won't work. # Users outside the US might want to use this list: # defaultchannels=3DIEEE80211b:1,7,13,2,8,3,14,9,4,10,5,11,6,12 defaultchannels=3DIEEE80211b:1,6,11,2,7,3,8,4,9,5,10 # 802.11g uses the same channels as 802.11b... defaultchannels=3DIEEE80211g:1,6,11,2,7,3,8,4,9,5,10 # 802.11a channels are non-overlapping so sequential is fine. You may want= to # adjust the list depending on the channels your card actually supports. # defaultchannels=3DIEEE80211a:36,40,44,48,52,56,60,64,100,104,108,112,116,= 120,124,128,132,136,140,149,153,157,161,184,188,192,196,200,204,208,212,216= =20 defaultchannels=3DIEEE80211a:36,40,44,48,52,56,60,64 # Combo cards like Atheros use both 'a' and 'b/g' channels. Of course, you # can also explicitly override a given source. You can use the script=20 # extras/listchan.pl to extract all the channels your card supports. defaultchannels=3DIEEE80211ab:1,6,11,2,7,3,8,4,9,5,10,36,40,44,48,52,56,60,= 64 # Fine-tuning channel hopping control: # The sourcechannels option can be used to set the channel hopping for=20 # specific interfaces, and to control what interfaces share a list of=20 # channels for split hopping. This can also be used to easily lock # one card on a single channel while hopping with other cards. # Any card without a sourcechannel definition will use the standard hopping # list. # sourcechannels=3Dsourcename[,sourcename]:ch1,ch2,ch3,...chN # ie, for us channels on the source 'prism2source' (same as normal channel # hopping behavior): # sourcechannels=3Dprism2source:1,6,11,2,7,3,8,4,9,5,10 # Given two capture sources, "prism2a" and "prism2b", we want prism2a to st= ay # on channel 6 and prism2b to hop normally. By not setting a sourcechannel= s=20 # line for prism2b, it will use the standard hopping. # sourcechannels=3Dprism2a:6 # To assign the same custom hop channel to multiple sources, or to split th= e=20 # same custom hop channel over two sources (if splitchannels is true), list # them all on the same sourcechannels line: # sourcechannels=3Dprism2a,prism2b,prism2c:1,6,11 # Port to serve GUI data tcpport=3D2501 # People allowed to connect, comma seperated IP addresses or network/mask # blocks. Netmasks can be expressed as dotted quad (/255.255.255.0) or as # numbers (/24) allowedhosts=3D127.0.0.1 # Address to bind to. Should be an address already configured already on # this host, reverts to INADDR_ANY if specified incorrectly. bindaddress=3D127.0.0.1 # Maximum number of concurrent GUI's maxclients=3D5 # Do we have a GPS? gps=3Dtrue # Host:port that GPSD is running on. This can be localhost OR remote! gpshost=3Dlocalhost:2947 # Do we lock the mode? This overrides coordinates of lock "0", which will # generate some bad information until you get a GPS lock, but it will=20 # fix problems with GPS units with broken NMEA that report lock 0 gpsmodelock=3Dfalse # Packet filtering options: # filter_tracker - Packets filtered from the tracker are not processed or # recorded in any way. # filter_dump - Packets filtered at the dump level are tracked, displaye= d, # and written to the csv/xml/network/etc files, but not=20 # recorded in the packet dump # filter_export - Controls what packets influence the exported CSV, networ= k, # xml, gps, etc files. # All filtering options take arguments containing the type of address and # addresses to be filtered. Valid address types are 'ANY', 'BSSID', # 'SOURCE', and 'DEST'. Filtering can be inverted by the use of '!' before # the address. For example, # filter_tracker=3DANY(!00:00:DE:AD:BE:EF) # has the same effect as the previous mac_filter config file option. # filter_tracker=3D... # filter_dump=3D... # filter_export=3D... # Alerts to be reported and the throttling rates. # alert=3Dname,throttle/unit,burst/unit # The throttle/unit describes the number of alerts of this type that are # sent per time unit. Valid time units are second, minute, hour, and day. # Burst rates control the number of packets sent at a time # For example: # alert=3DFOO,10/min,5/sec # Would allow 5 alerts per second, and 10 alerts total per minute. # A throttle rate of 0 disables throttling of the alert. # See the README for a list of alert types. alert=3DNETSTUMBLER,10/min,1/sec alert=3DWELLENREITER,10/min,1/sec alert=3DLUCENTTEST,10/min,1/sec alert=3DDEAUTHFLOOD,10/min,2/sec alert=3DBCASTDISCON,10/min,2/sec alert=3DCHANCHANGE,5/min,1/sec alert=3DAIRJACKSSID,5/min,1/sec alert=3DPROBENOJOIN,10/min,1/sec alert=3DDISASSOCTRAFFIC,10/min,1/sec alert=3DNULLPROBERESP,10/min,1/sec alert=3DBSSTIMESTAMP,10/min,1/sec # Known WEP keys to decrypt, bssid,hexkey. This is only for networks where # the keys are already known, and it may impact throughput on slower hardwa= re. # Multiple wepkey lines may be used for multiple BSSIDs. # wepkey=3D00:DE:AD:C0:DE:00,FEEDFACEDEADBEEF01020304050607080900 # Is transmission of the keys to the client allowed? This may be a security # risk for some. If you disable this, you will not be able to query keys f= rom # a client. allowkeytransmit=3Dtrue # How often (in seconds) do we write all our data files (0 to disable) writeinterval=3D300 # Do we use sound? # Not to be confused with GUI sound parameter, this controls wether or not = the # server itself will play sound. Primarily for headless or automated syste= ms. sound=3Dfalse # Path to sound player soundplay=3D/usr/bin/play # Optional parameters to pass to the player # soundopts=3D--volume=3D.3 # New network found sound_new=3D/usr/local/share/kismet/wav/new_network.wav # Wepped new network # sound_new_wep=3D${prefix}/com/kismet/wav/new_wep_network.wav # Network traffic sound sound_traffic=3D/usr/local/share/kismet/wav/traffic.wav # Network junk traffic found sound_junktraffic=3D/usr/local/share/kismet/wav/junk_traffic.wav # GPS lock aquired sound # sound_gpslock=3D/usr/local/share/kismet/wav/foo.wav # GPS lock lost sound # sound_gpslost=3D/usr/local/share/kismet/wav/bar.wav # Alert sound sound_alert=3D/usr/local/share/kismet/wav/alert.wav # Does the server have speech? (Again, not to be confused with the GUI's sp= eech) speech=3Dfalse # Server's path to Festival festival=3D/usr/bin/festival # Are we using festival lite? If so, set the above "festival" path to also # point to the "flite" binary flite=3Dfalse # How do we speak? Valid options: # speech Normal speech # nato NATO spellings (alpha, bravo, charlie) # spell Spell the letters out (aye, bee, sea) speech_type=3Dnato # speech_encrypted and speech_unencrypted - Speech templates # Similar to the logtemplate option, this lets you customize the speech out= put. # speech_encrypted is used for an encrypted network spoken string # speech_unencrypted is used for an unencrypted network spoken string # # %b is replaced by the BSSID (MAC) of the network # %s is replaced by the SSID (name) of the network # %c is replaced by the CHANNEL of the network # %r is replaced by the MAX RATE of the network speech_encrypted=3DNew network detected, s.s.i.d. %s, channel %c, network e= ncrypted. speech_unencrypted=3DNew network detected, s.s.i.d. %s, channel %c, network= open. # Where do we get our manufacturer fingerprints from? Assumed to be in the # default config directory if an absolute path is not given. ap_manuf=3Dap_manuf client_manuf=3Dclient_manuf # Use metric measurements in the output? metric=3Dfalse # Do we write waypoints for gpsdrive to load? Note: This is NOT related to # recent versions of GPSDrive's native support of Kismet. waypoints=3Dfalse # GPSDrive waypoint file. This WILL be truncated. waypointdata=3D%h/.gpsdrive/way_kismet.txt # Do we want ESSID or BSSID as the waypoint name ? waypoint_essid=3Dfalse # How many alerts do we backlog for new clients? Only change this if you h= ave # a -very- low memory system and need those extra bytes, or if you have a h= igh # memory system and a huge number of alert conditions. alertbacklog=3D50 # File types to log, comma seperated # dump - raw packet dump # network - plaintext detected networks # csv - plaintext detected networks in CSV format # xml - XML formatted network and cisco log # weak - weak packets (in airsnort format) # cisco - cisco equipment CDP broadcasts # gps - gps coordinates logtypes=3Ddump,network,csv,xml,weak,cisco,gps # Do we track probe responses and merge probe networks into their owners? # This isn't always desireable, depending on the type of monitoring you're # trying to do. trackprobenets=3Dtrue # Do we log "noise" packets that we can't decipher? I tend to not, since= =20 # they don't have anything interesting at all in them. noiselog=3Dfalse # Do we log corrupt packets? Corrupt packets have enough header information # to see what they are, but someting is wrong with them that prevents us fr= om # completely dissecting them. Logging these is usually not a bad idea. corruptlog=3Dtrue # Do we log beacon packets or do we filter them out of the dumpfile beaconlog=3Dtrue # Do we log PHY layer packets or do we filter them out of the dumpfile phylog=3Dtrue # Do we mangle packets if we can decrypt them or if they're fuzzy-detected mangledatalog=3Dtrue # Do we do "fuzzy" crypt detection? (byte-based detection instead of 802.11 # frame headers) # valid option: Comma seperated list of card types to perform fuzzy detecti= on=20 # on, or 'all' fuzzycrypt=3Dwtapfile,wlanng,wlanng_legacy,wlanng_avs,hostap,wlanng_wext,ip= w2200,ipw2915 # Do we use network-classifier fuzzy-crypt detection? This means we expect= =20 # packets that are associated with an encrypted network to be encrypted too= ,=20 # and we process them by the same fuzzy compare.=20 # This essentially replaces the fuzzycrypt per-source option. netfuzzycrypt=3Dtrue # What type of dump do we generate?=20 # valid option: "wiretap"=20 dumptype=3Dwiretap # Do we limit the size of dump logs? Sometimes ethereal can't handle big o= nes. # 0 =3D No limit # Anything else =3D Max number of packets to log to a single file before cl= osing # and opening a new one. dumplimit=3D0 # Do we write data packets to a FIFO for an external data-IDS (such as Snor= t)? # See the docs before enabling this. #fifo=3D/tmp/kismet_dump # Default log title logdefault=3DKismet # logtemplate - Filename logging template. # This is, at first glance, really nasty and ugly, but you'll hardly ever # have to touch it so don't complain too much. # # %n is replaced by the logging instance name # %d is replaced by the current date as Mon-DD-YYYY # %D is replaced by the current date as YYYYMMDD # %t is replaced by the starting log time # %i is replaced by the increment log in the case of multiple logs # %l is replaced by the log type (dump, status, crypt, etc) # %h is replaced by the home directory # ie, "netlogs/%n-%d-%i.dump" called with a logging name of "Pok" could exp= and # to something like "netlogs/Pok-Dec-20-01-1.dump" for the first instance a= nd=20 # "netlogs/Pok-Dec-20-01-2.%l" for the second logfile generated. # %h/netlots/%n-%d-%i.dump could expand to # /home/foo/netlogs/Pok-Dec-20-01-2.dump # # Other possibilities: Sorting by directory # logtemplate=3D%l/%n-%d-%i # Would expand to, for example, # dump/Pok-Dec-20-01-1 # crypt/Pok-Dec-20-01-1 # and so on. The "dump", "crypt", etc, dirs must exist before kismet is run # in this case. logtemplate=3D%n-%d-%i.%l # Where do we store the pid file of the server? piddir=3D/var/run/ # Where state info, etc, is stored. You shouldnt ever need to change this. # This is a directory. configdir=3D%h/.kismet/ # cloaked SSID file. You shouldn't ever need to change this. ssidmap=3Dssid_map # Group map file. You shouldn't ever need to change this. groupmap=3Dgroup_map # IP range map file. You shouldn't ever need to change this. ipmap=3Dip_map --=20 Chris Hilton chris-at-vindaloo-dot-com ------------------------------------------------------------------------ "All I was doing was trying to get home from work!" -- Rosa Parks --GvXjxJ+pjyke8COw Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) iQEVAwUBRI/+IILaxorQlXotAQKZHQf8DD1FeKwWg+/GsYZTTwXleYL3GV6mp7cF UDlnbrplSBQfBNbymRHifh0+fj5zh5rUP7oDghf3FBC2A5PhYhnb9XbJPQSm5KXy WcJFZN/cJ5rTvM5HYcHYdPc/1eEmqkwf48uxRuGAwKIeJgYsrT2GkveFOUVMXBnL dE/8bSux2oztZsul0hDfBlV4Pg+6fSAwduD0XcO0bn/8aEvf9ZHOd+hHoljAD4tN g/KcwusYtvaUIeJoDQ8Lil+69sX2WQmiuPLnqXobYKGIXcP3zBPJwz8r541m7NrQ 9dmDFoTuso4YGWZTn8bNj4N12CVMw3Dd2FKNWI8H7nfCV8ZR9bZcdA== =A4Jx -----END PGP SIGNATURE----- --GvXjxJ+pjyke8COw--