Skip to content

Try #8: Radiotap on Monitor Mode interfaces for rx and tx

[email protected] linux-wireless 1 version New

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest7 patches 0 repliesNew

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/7sync wireless-dev with radiotap header in wireless-2.6include/net/ieee80211_radiotap.h+52 -250 replies
2/7mac80211: Add radiotap supportinclude/net/mac80211.h net/mac80211/ieee80211.c net/mac80211/ieee80211_iface.c+70 -150 replies
3/7mac80211: Monitor mode radiotap injection docsDocumentation/networking/mac80211-injection.txt Documentation/networking/radiotap-headers.txt+138 -00 replies
4/7mac80211: Define present bitmap extend bit maskinclude/net/ieee80211_radiotap.h+2 -00 replies
5/7cfg80211: Radiotap parserinclude/net/cfg80211.h net/wireless/Makefile net/wireless/radiotap.c+279 -10 replies
6/7mac80211: Monitor mode radiotap-based packet injectionnet/mac80211/ieee80211.c+196 -100 replies
7/7zd1211rw-mac80211: return hardware specific tx rate code for rx statusdrivers/net/wireless/mac80211/zd1211rw/zd_chip.c drivers/net/wireless/mac80211/zd1211rw/zd_chip.h drivers/net/wireless/mac80211/zd1211rw/zd_mac.c+25 -10 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH 0/7] Try #8: Radiotap on Monitor Mode interfaces for rx and tx

Hi folks -

This set of patches change the Monitor Mode wireless interfaces to use radiotap both for monitoring and for packet injection. The monitoring side is done by a patch from Michael Wu. For example, tcpdump can handle the resulting radiotap packets.

For injecting packets, you issue a packet using libpcap or a SOCK_PACKET socket down an interface to the wireless device that is in Monitor Mode. The packet has a normal radiotap header prepended to the IEEE80211 header. The radiotap header is variable length depending on what the user wants to
specify: currently the transmit rate, power and antenna are interpreted, and any other entries are skipped.

The radiotap parser is broken out into its own file under cfg80211.

A usermode app packetspammer is available from here

http://penumbra.warmcat.com/_twk/tiki-index.php?page=packetspammer

which allows easy injection of these packets from the commandline. At the moment it loops issuing packets at a variety of rates which can be seen from another machine's monitor mode interface on the same channel. There are instructions for build and using it on the page above.

Currently it has been tested for both rx and tx using zd1211rw-mac80211.

The patches are based against this morning's wireless-dev.

I also added some documentation files which explains how to use the injection functionality and radiotap header notes.

I have used the radiotap include patch from Michael Wu which basically syncs wireless-dev with the one in wireless-2.6, and his latest radiotap rx patch.

Michael Wu's rx patch exposed an issue with zd1211rw-mac80211 using its hardware-dependent rx rate coding which differs from the coding used to specify tx rates. I therefore added a small broken-out patch in this set which converts the reported rx rate from zd1211rw-mac80211 to use the corresponding tx rate coding, so mac80211 can use the reported rate with its rate tables (which use the hardware-specific tx rate coding) to find the absolute bitrate and report that via radiotap.