On Sun, Apr 20, 2014 at 11:26 PM, Stefan Sperling <s...@openbsd.org> wrote:
> On Sun, Apr 20, 2014 at 05:29:41PM -1000, Felix Johnson wrote:
> > I used an Atheros-based nic (but the firmware wouldn't load,
> > and yes, I copied it to /etc/firmware).
>
> Why manual copying? Running fw_update(1) was not an option?
> Does this nic actually get attached by a driver?
>
> > And then I tried using the Ubuntu 14.04 live cd,
> > and was able to connect.
> >
> > So I'm starting to think it's not the nic or the AP, but something I'm
> > doing wrong in OpenBSD. Are there any other commands I could run
> > to diagnose this more?
> >
> > Felix
>
> To rule out DHCP: Does it work if you give the zyd device a static IP?
>
> While you're associated with the zyd device and use the wifi from
> another machine in parallel, do the three tcpdump commands show
> broadcast frames from other machines?
>
> What does 'netstat -W zyd0' show after trying to connect with the zyd
> device for a while? Any unexpected dropped packets/errors in there?
>
> It's possible that you're running into some bug in the zyd driver,
> of course. Perhaps the firmware we ship for zyd is buggy.
> Since I have no zyd device to test with I'm as much in the dark as you.
>
The atheros-based nic does show up (athn0).
I (just now) used fw_update with the path set to a usb stick,
and dmesg still shows a problem loading the firmware
athn0 at uhub1 port 2 "ATHEROS UB91C" rev 2.00/1.08 addr 3
athn0: failed loadfirmware of file athn-ar9271 (error 2)
athn0: could not load firmware
Skipping out on dhcp and just using a fixed address partly works.
The device stays associated with the AP, and the Surfboard's control
console shows the device as connected.
The remaining problem is with routing - I can't ping hosts on
the local network or connect to the internet.
# ifconfig zyd0
zyd0: flags=28843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST,NOINET6> mtu 1500
lladdr 00:17:3f:52:1d:f3
priority: 4
groups: wlan egress
media: IEEE802.11 autoselect (OFDM9 mode 11g)
status: active
ieee80211: nwid "What does the Mo o say" chan 1
bssid 1c:c6:3c:4c:3e:67 75dB
wpakey 0xblah wpaprotos wpa1,wpa2 wpaakms psk
wpaciphers tkip,ccmp wpagroupcipher tkip 100dBm
inet 192.168.0.20 netmask 0xffffff00 broadcast 192.168.0.255
# netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Mtu Prio
Iface
default 192.168.0.1 UGS 1 396 - 12
zyd0
127/8 127.0.0.1 UGRS 0 0 33188 8
lo0
127.0.0.1 127.0.0.1 UH 1 0 33188 4
lo0
192.168.0/24 link#4 UC 1 0 - 4
zyd0
192.168.0.1 link#4 UHLc 1 0 - 4
zyd0
224/4 127.0.0.1 URS 0 0 33188 8
lo0
# netstat -W zyd0
ieee80211 on zyd0:
0 input packets with bad version
0 input packets too short
230 input packets from wrong bssid
57 input packet duplicates discarded
0 input packets with wrong direction
18 input multicast echo packets discarded
0 input packets from unassociated station discarded
0 input encrypted packets without wep/wpa config discarded
4 input unencrypted packets with wep/wpa config discarded
37 input wep/wpa packets processing failed
0 input packet decapsulations failed
1 input management packet discarded
22 input control packets discarded
1 input packet with truncated rate set
0 input packets with missing elements
0 input packets with elements too big
2655 input packets with elements too small
1 input packet with invalid channel
8 input packets with mismatched channel
0 node allocations failed
0 input packets with mismatched ssid
0 input packets with unsupported auth algorithm
0 input authentications failed
0 input associations from wrong bssid
0 input associations without authentication
0 input associations with mismatched capabilities
0 input associations without matching rates
0 input associations with bad rsn ie
0 input deauthentication packets
0 input disassociation packets
0 input packets with unknown subtype
0 input packets failed for lack of mbufs
0 input decryptions failed on crc
0 input ahdemo management packets discarded
0 input packets with bad auth request
2 input eapol-key packets
0 input eapol-key packets with bad mic
0 input eapol-key packets replayed
0 input packets with bad tkip mic
0 input tkip mic failure notifications
0 input packets on unauthenticated port
0 output packets failed for lack of mbufs
0 output packets failed for no nodes
0 output packets of unknown management type
1 output packet on unauthenticated port
1 active scan started
0 passive scans started
0 nodes timed out
0 failures with no memory for crypto ctx
37 ccmp decryption errors
0 ccmp replayed frames
0 cmac icv errors
0 cmac replayed frames
0 tkip icv errors
0 tkip replays
And the parallel tcpdumps (I sorted them):
12:28:18.395920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:18.456419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 109/0>
12:28:18.456420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:18.473418 802.11: probe request, <radiotap v0, chan 1, 11g, rssi
152/0>
12:28:18.473419 802.11: probe request
12:28:18.474668 802.11: probe request, <radiotap v0, chan 1, 11g, rssi
148/0>
12:28:18.474669 802.11: probe request
12:28:18.475918 802.11: probe request, <radiotap v0, chan 1, 11g, rssi
124/0>
12:28:18.475919 802.11: probe request
12:28:18.498419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 35/0>
12:28:18.498420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:18.558918 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 131/0>
12:28:18.558920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:18.600419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 35/0>
12:28:18.600420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:18.661418 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 136/0>
12:28:18.661419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:18.702919 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:18.702920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:18.763669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 108/0>
12:28:18.763670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:18.805169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 34/0>
12:28:18.805170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:18.867669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 101/0>
12:28:18.867673 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:18.907669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 38/0>
12:28:18.907670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:18.968418 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 103/0>
12:28:18.968419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.010169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 38/0>
12:28:19.010170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.070919 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 121/0>
12:28:19.070920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.112669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:19.112670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.173419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 111/0>
12:28:19.173420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.214919 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:19.214920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.275668 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 116/0>
12:28:19.275669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.317419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:19.317420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.378169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 132/0>
12:28:19.378170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.419919 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 44/0>
12:28:19.419920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.480419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 122/0>
12:28:19.480420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.521669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 35/0>
12:28:19.521670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.582919 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 137/0>
12:28:19.582920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.624419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 45/0>
12:28:19.624420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.726919 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:19.726920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.787669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 142/0>
12:28:19.787670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.829169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:19.829170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.890169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 142/0>
12:28:19.890171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:19.931669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:19.931670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:19.992419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 147/0>
12:28:19.992420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.034169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 38/0>
12:28:20.034170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.096420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 125/0>
12:28:20.096422 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.136419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:20.136420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.197418 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 140/0>
12:28:20.197419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.238919 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 46/0>
12:28:20.238920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.299669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 150/0>
12:28:20.299670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.342169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 38/0>
12:28:20.342170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.403919 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 141/0>
12:28:20.403920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.443669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 32/0>
12:28:20.443670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.504418 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 141/0>
12:28:20.504420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.546169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 36/0>
12:28:20.546170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.607172 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 123/0>
12:28:20.607173 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.648419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 41/0>
12:28:20.648420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.709419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 137/0>
12:28:20.709420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.751419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 37/0>
12:28:20.751420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.811668 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 121/0>
12:28:20.811670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.853170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:20.853172 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:20.914171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 95/0>
12:28:20.914172 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:20.955170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:20.955171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.016419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 118/0>
12:28:21.016420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.058919 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:21.058920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.118920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 96/0>
12:28:21.118921 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.160919 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:21.160920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.222669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 104/0>
12:28:21.222670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.262669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 46/0>
12:28:21.262670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.323669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 110/0>
12:28:21.323671 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.365419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 59/0>
12:28:21.365420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.426169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 112/0>
12:28:21.426170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.467669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:21.467670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.528419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 128/0>
12:28:21.528420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.570169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 37/0>
12:28:21.570170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.649333 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 99/0>
12:28:21.649334 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.672420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.672420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 45/0>
12:28:21.733419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 109/0>
12:28:21.733420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.774920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 36/0>
12:28:21.774921 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.835670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 141/0>
12:28:21.835671 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.877169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 36/0>
12:28:21.877170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:21.938169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 132/0>
12:28:21.938170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:21.980170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 36/0>
12:28:21.980171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.040419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 116/0>
12:28:22.040420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.081920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 41/0>
12:28:22.081921 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.142919 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 137/0>
12:28:22.142920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.184419 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 36/0>
12:28:22.184420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.245169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 111/0>
12:28:22.245170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.294920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 46/0>
12:28:22.294921 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.347669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, 235:1, <radiotap v0, chan 1, 11g, rssi 102/0>
12:28:22.347670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, 235:1
12:28:22.389169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 34/0>
12:28:22.389170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.450170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 126/0>
12:28:22.450171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.491669 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 42/0>
12:28:22.491670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.552420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 105/0>
12:28:22.552421 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.594170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 35/0>
12:28:22.594171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.654919 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 125/0>
12:28:22.654920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.707257 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:22.707258 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.707670 802.11: data: , <radiotap v0, chan 1, 11g, rssi 34/0>
12:28:22.707716 802.11: data: , <radiotap v0, chan 1, 11g, rssi 41/0>
12:28:22.713170 802.11: data: , <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:22.719669 802.11: data: , <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:22.726420 802.11: data: , <radiotap v0, chan 1, 11g, rssi 42/0>
12:28:22.731920 802.11: data: , <radiotap v0, chan 1, 11g, rssi 35/0>
12:28:22.740920 802.11: data: , <radiotap v0, chan 1, 11g, rssi 44/0>
12:28:22.748670 802.11: data: , <radiotap v0, chan 1, 11g, rssi 38/0>
12:28:22.753670 802.11: data: , <radiotap v0, chan 1, 11g, rssi 46/0>
12:28:22.760170 802.11: data: , <radiotap v0, chan 1, 11g, rssi 37/0>
12:28:22.761420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 108/0>
12:28:22.761421 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.798920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:22.798921 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:22.803669 802.11: data: , <radiotap v0, chan 1, 11g, rssi 31/0>
12:28:22.808420 802.11: data: , <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:22.811169 802.11: data: , <radiotap v0, chan 1, 11g, rssi 37/0>
12:28:22.859670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 113/0>
12:28:22.859672 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:22.962170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 134/0>
12:28:22.962171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.003170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 41/0>
12:28:23.003171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.064419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 124/0>
12:28:23.064420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.105924 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:23.105926 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.166919 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 113/0>
12:28:23.166920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.210420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 36/0>
12:28:23.210421 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.269170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 94/0>
12:28:23.269171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.310920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 41/0>
12:28:23.310921 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.371669 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 120/0>
12:28:23.371670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.414169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:23.414170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.474169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 111/0>
12:28:23.474170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.515670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 39/0>
12:28:23.515671 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.576670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 110/0>
12:28:23.576671 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.618169 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 40/0>
12:28:23.618170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.679169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 94/0>
12:28:23.679170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.720670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 47/0>
12:28:23.720671 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.781169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 116/0>
12:28:23.781171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.883670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 131/0>
12:28:23.883671 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:23.925170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 48/0>
12:28:23.925171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:23.986170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 125/0>
12:28:23.986171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.027670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:24.027671 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.088420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 125/0>
12:28:24.088422 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.130170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 42/0>
12:28:24.130171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.190920 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 116/0>
12:28:24.190921 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.232420 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 41/0>
12:28:24.232422 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.298006 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 123/0>
12:28:24.298007 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.341927 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:24.341929 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.395670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 107/0>
12:28:24.395671 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.436670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 42/0>
12:28:24.436672 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.498419 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 119/0>
12:28:24.498420 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.539670 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:24.539671 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.601170 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 137/0>
12:28:24.601171 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.641920 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 45/0>
12:28:24.641921 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.702919 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 104/0>
12:28:24.702921 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.746170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 134/0>
12:28:24.746171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.846921 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 43/0>
12:28:24.846923 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:24.907670 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 100/0>
12:28:24.907671 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor
12:28:24.949170 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26, <radiotap v0, chan 1, 11g, rssi 45/0>
12:28:24.949171 802.11: beacon, ssid (What does the Mo o say), rates, ds,
tim, erp, 47:1, rsn, xrates, 45:26
12:28:25.010169 802.11: beacon, ssid (Infected Computer), rates, ds, tim,
erp, rsn, xrates, vendor, <radiotap v0, chan 1, 11g, rssi 129/0>
I'm still shooting in the dark. But using sort to mix three files made me
feel better,
like I had begun to stretch an old muscle.
Thanks.
Felix
