Skip to content

Radiotap injection for Monitor Mode

[email protected] linux-wireless 1 version In review

Get series with b4
b4 am [email protected]

Versions newest first

  1. v1 Latest3 patches 8 repliesIn review

Patches in v1 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/3mac80211: Monitor mode radiotap injection docsDocumentation/networking/mac80211-injection.txt Documentation/networking/radiotap-headers.txt+138 -00 replies
2/3cfg80211: Radiotap parserDocumentation/networking/radiotap-headers.txt include/net/cfg80211.h net/wireless/Makefile +1 more+341 -15 replies
3/3mac80211: Monitor mode radiotap-based packet injectionnet/mac80211/ieee80211.c+215 -101 reply

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v1 yet.

Read the v1 thread

Cover letter [PATCH Try#12 0/3] Radiotap injection for Monitor Mode

These patches add the ability to inject packets down a monitor mode interface for transmission according to a prepended radiotap header.

For injecting packets, the you issue a packet using libpcap or a SOCK_PACKET socket down an interface to the wireless device that is in Monitor Mode. The packet has a normal radiotap header prepended to the IEEE80211 header. The radiotap header is variable length depending on what the user wants to specify, currently the transmit rate, power and antenna can be specified using normal radiotap semantics. Any other entries are skipped.

The radiotap parser is broken out into its own file under cfg80211.

A usermode app packetspammer is available from here

http://penumbra.warmcat.com/_twk/tiki-index.php?page=packetspammer

which allows easy injection of these packets from the commandline. At the moment it loops issuing packets at a variety of rates which can be seen from another machine's monitor mode interface on the same channel. There are instructions for build and using it on the page above along with Fedora 7 binary and source RPMS. There is now also a -f switch to allow testing of the FCS flag on injected packets.

Currently it has been tested for both rx and tx using zd1211rw-mac80211.

The patches are based against current wireless-dev.

I also added some documentation files which explains how to use the injection functionality and radiotap header notes.