You are not logged in.

#1 2008-09-30 10:29:44

burra
Member
From: Vaasa, Finland
Registered: 2006-05-26
Posts: 54

zd1211rw wireshark promiscuous

Hi,
I am trying to do some wlan debugging. I have a zd1211 usb wlan adapter. Running zd1211rw drivers from 2.6.26 kernel. The problem is that I can't get the card in promiscuous mode.

This is what i have tried

iwconfig wlan0 mode monitor channel 9
ifconfig wlan0 promisc
ifconfig wlan0 up

tcpdump -i wlan0 or wireshark on wlan0 with promiscuous mode checked

All I can see are probes and beacons and some ARP requests. All are broadcast messages.
Anybody gost som suggestions on what to do?

Old, but seems like similar problem.
http://ubuntuforums.org/showthread.php?t=316986

ps.
The USB stick is in a USB 1.1 port.

Burra

Offline

#2 2008-09-30 12:50:51

iphitus
Forum Fellow
From: Melbourne, Australia
Registered: 2004-10-09
Posts: 4,927

Re: zd1211rw wireshark promiscuous

does the driver support it?

Offline

#3 2008-09-30 13:01:01

burra
Member
From: Vaasa, Finland
Registered: 2006-05-26
Posts: 54

Re: zd1211rw wireshark promiscuous

Hi,
I am unsure if it's possible. The only info I have found is that the driver supports a degree of monitor mode.

It should be possible to passively monitor.

http://www.linuxwireless.org/en/users/Drivers/zd1211rw

I'm unsure about packet injection.

Burra

Offline

#4 2008-09-30 13:30:20

tomk
Forum Fellow
From: Ireland
Registered: 2004-07-21
Posts: 9,839

Re: zd1211rw wireshark promiscuous

The aircrack-ng wiki is the best place for injection-related info IMO. They also provide patches for many drivers, zd1211 included.

Offline

#5 2008-10-01 07:11:14

burra
Member
From: Vaasa, Finland
Registered: 2006-05-26
Posts: 54

Re: zd1211rw wireshark promiscuous

I don't need to do injection. I only want to see all messages. Now I'm only able to see Broadcast messages. Not point to point messages. Loaded Backtrack3 on another computer that uses ipw2200 drivers. That computer was able to see point to point messages.

Tried to get some help on the #zd1211 irc channel, but no one has been active there. I might need to give the zd1211rw mailing list a try.

Burra

Offline

Board footer

Powered by FluxBB