Re: Cisco cards and rfmon oddities on FreeBSD.

On Mon, 11 Nov 2002, Doug Ambrisko wrote:

> Yes, lots of people.  Now you know why lots of AP in one place can make
> things really slow.  I'm just copying the data of the air so what's
> in the air is what you get.  Collisions in the air are really common.
> What needs to be done is to detect a packet with a collision and
> drop those packets by Kismet.  The driver shouldn't since they can
> be useful to watch collisions in your air space.

Repetition of unique network identifiers?

> I don't know how to check for a valid packet off the top of my head but
> the should be a check.  Ethereal whines on some detail I forget (FCS?) the
> the card does not pass up in the 802.11 monitor mode that it wants or
> sends it up.  Not that RFMON is not pure monitor since if the WEP key
> is provided it will decrypt the packet in hardware.  That will mess
> up Ethereal.  I patch Ethereal to ignore the WEP processing and to
> show WEP de-crypted packets in sniff mode.  This in itself could
> invalidate the packet.

Kismet only looks at the headers on BSD.

-pedro

--
*bsd wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/bsd-wireless/