Date: Mon, 6 Feb 2012 18:35:42 +0100 From: Bernhard Schmidt <bschmidt@freebsd.org> To: freebsd-wireless@freebsd.org Cc: rpaulo@freebsd.org Subject: Re: FreeBSD 9.0 ath driver injection with aireplay_ng returns input/output error in AHDemo and Monitor mode Message-ID: <201202061835.43116.bschmidt@freebsd.org> In-Reply-To: <CACcnmU3NtUYiNqcU4L75DW6GS5gzGu-CAywJJFSRSm%2BRdMomDQ@mail.gmail.com> References: <CACcnmU3NtUYiNqcU4L75DW6GS5gzGu-CAywJJFSRSm%2BRdMomDQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
On Monday 06 February 2012 15:32:42 Merlin Corey wrote: > Hello, > > Like some a year before me, from a thread two years before me ( > http://forums.freebsd.org/showthread.php?t=10042 ), I am interested in > making my (pun intended) penultimate pen-testing netbook on my > favorite operating system, FreeBSD; alas, I am not able to make use of > the atheros card in said netbook for the purposes of injection. > > It is perhaps worth nothing that I started this project on FreeBSD > 8.x, but my card (AR9285 card=0x10891a3b chip=0x002b168c rev=0x01 hdr= > 0x00) was only working at what seemed half power and would constantly > take itself up/down. I have since updated the system to 9.0-RELEASE > and experienced what appeared to be fully functioning wireless until > now. > > In the thread linked above, there is a mention of a kernel patch which > allows writing in monitor mode - I desperately applied this patch > after finding that the instructions to patch aircrack itself seem to > have already been applied either in ports or upstream. > > Now, I can run airodump just fine, but when I try to do injection test > with aireplay in either ahdemo or monitor mode, I simply end up with a > bunch of "wi_write(): Input/output error" messages. > > I am not really sure how to proceed in further debugging this issue; > should I turn wlandebug on, and if so, which bit is best, or should I > just throw them all? Perhaps something else entirely? > > Is this maybe a problem with my card itself? > > Any push in the right direction would be greatly appreciated. Can you set a channel and ssid before starting any kind of injection? Something like ifconfig wlan0 create wlandev ath0 wlanmode ahdemo ifconfig wlan0 channel 1 ssid foobar up If I remember correctly, the interface will otherwise scan indefinitely trying to find an open network to connect to. Setting a channel/ssid will ensure that the interface moves into RUN state (you can verify that with wlandebug +state) which should allow injection. Trying to do so while in eg. SCAN state is really too racy due to all the channel changes going on. Basically, injection is a real mess currently and neither monitor nor ahdemo mode are really that well suited for that purpose. Monitor mode is designed to be totally mute while ahdemo is adhoc mode without mgmt frames but a lot of unnecessary logic behind it. Guess we should really think about a new mode specially designed to handle those needs, or re-enable injection in monitor mode which would break it's initial purpose.. thoughts? -- Bernhard
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201202061835.43116.bschmidt>