Re: b43 Injection? Yes!

2008-01-09 Thread Stefano Brivio
On Tue, 8 Jan 2008 19:46:41 -0500 David Ellingsworth [EMAIL PROTECTED] wrote: I wish I could say the same for the b43legacy driver.. here are my results from the same version of aireplay: # ./aireplay-ng -9 wlan0 19:27:51 Trying broadcast probe requests... 19:27:53 No Answer...

RE: b43 Injection? Yes!

2008-01-09 Thread David Ellingsworth
On Tue, 8 Jan 2008 19:46:41 -0500 David Ellingsworth wrote: I wish I could say the same for the b43legacy driver.. here are my results from the same version of aireplay: # ./aireplay-ng -9 wlan0 19:27:51 Trying broadcast probe requests... 19:27:53 No Answer... 19:27:53 Found 2 APs

RE: b43 Injection?

2008-01-08 Thread David Ellingsworth
Dan - Sorry I meant each function b43_dma_tx b43_pio_tx. c-box b43 # grep -Hnr b43_dma_tx * dma.c:1201:int b43_dma_tx(struct b43_wldev *dev, c-box b43 # grep -Hnr b43_pio_tx * pio.c:428:int b43_pio_tx(struct b43_wldev *dev, There is a b43_tx function in main.c which calls the above tx

Re: b43 Injection?

2008-01-08 Thread Michael Buesch
On Tuesday 08 January 2008 16:31:53 David Ellingsworth wrote: mac80211 supposedly has support for packet injection. Like you however, I have have not been able to get packet injection to work with the b43/b43legacy drivers and the developers have expressed that they are not interested in

RE: b43 Injection?

2008-01-08 Thread David Ellingsworth
Michael - On Tuesday 08 January 2008 16:31:53 David Ellingsworth wrote: mac80211 supposedly has support for packet injection. Like you however, I have have not been able to get packet injection to work with the b43/b43legacy drivers and the developers have expressed that they are not

Re: b43 Injection?

2008-01-08 Thread Johannes Berg
mac80211 has support for packet injection and people say it works. works fine, hostapd uses it now. if (as said later in this thread) aireplay doesn't work it's at fault. johannes signature.asc Description: This is a digitally signed message part

Re: b43 Injection?

2008-01-08 Thread Michael Buesch
On Tuesday 08 January 2008 21:23:18 Daniel wrote: Hello, Johannes Berg wrote: mac80211 has support for packet injection and people say it works. This is a very good point, mac80211 (if patched) can handle packet injection. It should work without any patches. The patch is in the

Re: b43 Injection?

2008-01-08 Thread Daniel Bartlett
Hey, Michael Buesch wrote: On Tuesday 08 January 2008 21:23:18 Daniel wrote: Johannes Berg wrote: mac80211 has support for packet injection and people say it works. This is a very good point, mac80211 (if patched) can handle packet injection. It should work without any patches. From

Re: b43 Injection?

2008-01-08 Thread Daniel
Hello, Johannes Berg wrote: mac80211 has support for packet injection and people say it works. This is a very good point, mac80211 (if patched) can handle packet injection. I have tested it on 2 aps so far but with no success. I think I'm going to add some kernel prints into the sources..

Re: b43 Injection? Yes!

2008-01-08 Thread Daniel
Hello All, Daniel Bartlett wrote: I'll investigate this route further. Well indeed I have, and aircrack-ng-1.0-dev injects fine with b43. Just need to use the SVN copy: svn co http://trac.aircrack-ng.org/svn/branch/1.0-dev/ cd 1.0-dev/ make install And there you are! Well unless you want to

RE: b43 Injection? Yes!

2008-01-08 Thread David Ellingsworth
c-box aircrack-ng-1.0 # ./sbin/aireplay-ng -9 wlan0 22:16:10 Trying broadcast probe requests... 22:16:10 Injection is working! 22:16:12 Found 1 AP 22:16:12 Trying directed probe requests... 22:16:12 00:90:D0:E3:18:E4 - channel: 3 - 'WEA' 22:16:17 Ping (min/avg/max):

b43 Injection?

2008-01-07 Thread Daniel
Hello, I've started tinkering with a patch for the b43 driver to allow injection. I just wondered if anyone else has done this yet? And if there is some pointers to the differences between bcm43xx and b43 because I'm not finding it that easy so far ;) Cheers, DanBUK.

Re: b43 Injection?

2008-01-07 Thread Daniel Bartlett
Hello Again, I guess what is stumping me at the moment is where the struct ieee80211_tx_control *ctl comes from that is passed to b43_dma/pio_tx comes from? I have grep'ed through b43 / ssb and not come up with where it is initialised. Any pointers? Cheers, DanBUK.

Re: b43 Injection?

2008-01-07 Thread Daniel
Hello Ehud, Sorry I meant each function b43_dma_tx b43_pio_tx. c-box b43 # grep -Hnr b43_dma_tx * dma.c:1201:int b43_dma_tx(struct b43_wldev *dev, c-box b43 # grep -Hnr b43_pio_tx * pio.c:428:int b43_pio_tx(struct b43_wldev *dev, I am trying to convert the injection patch from bcm43xx which