On Tuesday 03 June 2008, Drew Tomlinson wrote:
> Ever since I upgraded my gentoo-sources kernel from 2.6.23 to 2.6.25, I
> can no longer see packets on my wireless network for any device other
> than my own. The tcpdump output looks like this:
>
> 20:49:32.909144 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Unnumbered, disc,
> Flags [Final], length 44
> 20:49:32.912775 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Information, send seq
> 42, rcv seq 0, Flags [Response], length 204
> 20:49:32.916874 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Supervisory, Receiver
> not Ready, rcv seq 0, Flags [Response], length 169
> 20:49:32.976738 00:12:bf:2a:2c:76 (oui Unknown) Unknown SSAP 0x10 >
> 00:1f:32:5f:fe:06 (oui Unknown) Unknown DSAP 0xc2 Information, send seq
> 43, rcv seq 0, Flags [Response], length 64
> 20:49:33.047570 00:12:bf:2a:2c:76 (oui Unknown) > 00:1f:32:5f:fe:06 (oui
> Unknown), ethertype Unknown (0x05ec), length 1530:
> 0x0000: c211 5700 c393 1b7b 838f 366c 27c5 f97a ..W....{..6l'..z
> 0x0010: 5111 7d1a 1e33 bebd a432 ff30 5a35 e0ad Q.}..3...2.0Z5..
> 0x0020: ba16 2b31 f1e9 d905 5967 f333 d3a1 4ba3 ..+1....Yg.3..K.
> 0x0030: 1e32 0f18 fcc2
>
> I've Googled for an answer and think that my problem is that I am unable
> to decrypt WEP packets for any device other than my own. This is a
> simple 64 bit WEP network in my home. Unfortunately I did not find
> anything that applied to my situation.
>
> One thing different about my new kernel config is that because I have a
> Broadcom card, I moved to the new b43 driver instead of the old
> b43_legacy driver. I am using version 4 firmware however I had the same
> problem with version 3 firmware. I was hoping that would fix it but no
> luck.
>
> I am also using the new MAC80211 stack instead of the older IEEE80211
> stack.
>
> Any ideas on what I have done wrong?How do you invoke tcpdump? Are you placing your interface in promiscuous mode? If you iface is 00:12:bf:2a:2c:76 which one is 00:1f:32:5f:fe:06 ? The router? Does setting -s 65535 provide more packet info? -- Regards, Mick
signature.asc
Description: This is a digitally signed message part.
