[BAT] OpenBSD 3.0 + smc 2632w + dwepdump

Wed, 3 Apr 2002 07:06:48 -0800

Sounds good, and I don't have to scan every channel, just the ones used at
the particular installation. An interesting extension to the principle would
be to watch the file size between switches to try to guess which channels
had more interesting traffic and weight the switching to them. =)

Thanks,
-mentat21

----- Original Message -----
From: "h1kari" <>
To: "bat" <>
Sent: Tuesday, April 02, 2002 12:31 PM
Subject: Re: [BAT] OpenBSD 3.0 + smc 2632w + dwepdump

If you want dwepdump to pick up traffic on multiple channels, you'll either
have to get additional cards or write a script to switch the channel on the
card (pretty much what dstumbler does for it's channel switching). You can
switch the card manually while the card is in monitor mode by simply using
prism2ctl's channel switching mechanism:

prism2ctl wi0 -f <channel>

This will switch the channel that the card is listening on, and will keep
you in monitor mode (a lot faster than using wicontrol). If you use
wicontrol to switch the channel, it won't work, because any time you write
to any rid registers it throws the card out of monitor mode.

You could probably easily write a perl/shell script that will switch
inbetween multiple channels using prism2ctl, but you'll be loosing some
traffic since you can only be listening on one channel at a time.

-h1kari

--
David Hulton <>
Senior Researcher, Dachb0den Labs
https://dachb0den.com

On 4/2/02 7:26 AM, "James Burns" <> wrote:

> Is there a way to set the card to listen to all channels when in monitor
> mode? It seems to effectively do this when using dstumbler, but it would
be
> nice to be able to do it for cracking groups of nodes which share an SSID.
> In other words, it would be cool if dwepdump had a mode where it scanned
> all
> channels and recorded stuff from a specified SSID. If the scanning all
> channels thing is possible now without using dstumbler, could someone
> explain how? Thanks.
>
> -mentat21
>
>> ----- Original Message -----
>> From: "h1kari" <>
>> To: "bat" <>
>> Sent: Saturday, March 30, 2002 1:20 PM
>> Subject: Re: [BAT] OpenBSD 3.0 + smc 2632w + dwepdump
>>
>>
>> I already talked to dmuz (Josha Bronson) about this on irc, the problem
> was
>> that he wasn't setting the card into monitor mode. For everyone else out
>> there that skim through the README and webpage, you should do the
> following
>> when running dwepdump:
>>
>> ifconfig wi0 up   # make sure your network card is up (should be assumed)
>>
>> # optional stuff if you want to restrict the channel you listen on
>> # also makes it so your card doesnąt send out probe requests (stealth)
>> wicontrol wi0 -p 3   # set card into adhoc mode
>> wicontrol wi0 -f <channel>   # set channel to listen on
>>
>> prism2ctl wi0 -m   # you must set the card into monitor mode
>>
>> Cheers,
>> -h1kari
>>
>>
>> --
>> David Hulton <>
>> Senior Researcher, Dachb0den Labs
>> https://dachb0den.com
>>
>>
>> On 3/28/02 6:34 PM, "Josha Bronson" <>
>> wrote:
>>
>>>
>>> Hey all,
>>>
>>> Sorry if this has been covered already. I just joined the list.
>>>
>>> I've been using dstumbler with my Orinoco gold card for a while now on
>>> OpenBSD with great results. However I recently got my hands on an SMC
>>> 2632w card so that I can start to play with the dwep* utils.
>>>
>>> The card is detected by OpenBSD, I ifconfig up it and then run 'sudo
>>> dwepdump -a wi0 log', it starts up and then just sits there saying
>>> 'packets received: 0'.
>>>
>>> I just upgraded to the latest firmware (0.8 variant 3) from SMC hoping
>>> that would solve the problem but no luck.
>>>
>>> I know that the source patches are working because of my success with
>>> dstumbler and the Orinoco. Also I know that *using* WEP with a prism2
>>> based card in OpenBSD =< 3.0 does not work, but I *think* that I should
>>> still be able to dump the frames for cracking.
>>>
>>> Anyway any sort of input or tips would be greatly appreciated.
>>>
>>> danke,
>>
>> _______________________________________________
>> Bat mailing list
>> 
>> http://lists.dachb0den.com/mailman/listinfo/bat
>>
>>
>
> _______________________________________________
> Bat mailing list
> 
> http://lists.dachb0den.com/mailman/listinfo/bat
>

_______________________________________________
Bat mailing list

http://lists.dachb0den.com/mailman/listinfo/bat