From owner-freebsd-hackers  Mon Jun 11 20:24:11 2001
Delivered-To: freebsd-hackers@freebsd.org
Received: from ambrisko.com (adsl-64-174-51-42.dsl.snfc21.pacbell.net [64.174.51.42])
	by hub.freebsd.org (Postfix) with ESMTP id 08A6537B401
	for <freebsd-hackers@freebsd.org>; Mon, 11 Jun 2001 20:24:07 -0700 (PDT)
	(envelope-from ambrisko@ambrisko.com)
Received: (from ambrisko@localhost)
	by ambrisko.com (8.11.3/8.11.3) id f5C3NsD42170
	for freebsd-hackers@freebsd.org; Mon, 11 Jun 2001 20:23:54 -0700 (PDT)
	(envelope-from ambrisko)
From: Doug Ambrisko <ambrisko@ambrisko.com>
Message-Id: <200106120323.f5C3NsD42170@ambrisko.com>
Subject: 802.11 sniffing with Cisco/Aironet card
To: freebsd-hackers@freebsd.org
Date: Mon, 11 Jun 2001 20:23:54 -0700 (PDT)
X-Mailer: ELM [version 2.4ME+ PL82 (25)]
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=US-ASCII
Sender: owner-freebsd-hackers@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-hackers.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-hackers>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-hackers>
X-Loop: FreeBSD.ORG

In my latest set of patches for -stable the Aironet driver with a few
patches to FreeBSD's bpf & libpcap to support 802.11 packets permits
sniffing of raw 802.11 packets.

The patches are at:
	http://www.ambrisko.com/doug/an/
The latest version is
	an.patch.cisco.rfmon2+ifconfig3

Several bug fixes have been applied and some of the ifconfig patches that 
Brooks did since if_an.c depends on some of the 802.11 headers that he
did.  Some of the 802.11 monitor code is from Javier work on the Aironet
driver for Linux.  This patch also includes the Cisco driver emulation
(that needs my Linux emulator patch).  I also unified the .h files in
/sys/dev/an so that there are only one definition for things except in
the case where I'm trying to keep the Linux definitions for things
so we can just compile Linux apps. such as the firmware upgrade utility.
There is a sysctl to support tracing and dumping RIDs.

To sniff packets you seem to need version 17a of Ethereal or relatively
recent version from the Ethereal CVS server.  I have a version of
17a Ethereal on my web site in the "an" directory.

Thanks to the people that helped my test this out on -stable.

Doug A.

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message