RFMON on Cisco 350 card with Redhat 9

über-noob · 11-01-2003, 10:25 PM

Can someone help me with detailed instructions on the easiest way to get a Cisco Aironet 350 PCMCIA card to go into RFMON mode for Kismet under Redhat 9? I've read both the 2.4.20 kernel drivers and the latest Cisco drivers have disabled RFMON. I tried to recompile my kernel with the drivers from http://airo-linux.sourceforge.net but I keep getting errors. Exactly how am I to "apply the patch in the patch directory"? I'm used to using a diff file and when I try to patch, I get many errors:

Code:

[root@localhost linux-2.4]# patch -p1 < /tmp/airo-linux/kernel/patches/2.4.3.patch
patching file drivers/net/Config.in
Hunk #1 FAILED at 254.
1 out of 1 hunk FAILED -- saving rejects to file drivers/net/Config.in.rej
patching file drivers/net/Makefile
Hunk #1 succeeded at 106 (offset 17 lines).
patching file drivers/net/pcmcia/Config.in
Hunk #1 succeeded at 32 with fuzz 2 (offset 2 lines).
Hunk #2 FAILED at 41.
1 out of 2 hunks FAILED -- saving rejects to file drivers/net/pcmcia/Config.in.rej
patching file drivers/net/pcmcia/Makefile
Hunk #1 FAILED at 30.
1 out of 1 hunk FAILED -- saving rejects to file drivers/net/pcmcia/Makefile.rejpatching file Documentation/Configure.help
Hunk #1 succeeded at 9187 with fuzz 1 (offset 1877 lines).

Is there an easy way to just recompile the airo.o and airo_cs.o modules and be done with it?

finegan · 11-03-2003, 08:26 PM

The patch is for a pure 2.4.20(?) tree, where redhat has monkied with things so much that the patch isn't going to apply cleanly at all.
Whoa... that patch is old, that's for a 2 year old kernel... so is that source code... I can't seem to find a way to just get the driver source like with orinoco_cs, it seems that its just going straight to Marcelo and he doesn't CVS hsi stuff anywhere, which is slightly annoying.

Honestly, the easiest way would be to just compile a whole other kernel by hand that predates the rmmon change.

If I remember right, the drivers directly from Cisco actually covered monitor mode too, have you tried those yet?

Cheers,

Finegan

über-noob · 11-11-2003, 07:38 PM

Thanks finegan. I'll have to consider the whole kernel recompile... I was really hoping it wouldn't come to that. The current drivers directly from Cisco have removed RFMON as well unfortunately. I tried dumping the 'RFMON-enabled' source code into their package and compiling but that didn't work either.

über-noob · 11-14-2003, 08:27 PM

Oh sweet plastic-coated Jesus I will never get this to work. After installing kernel-source for 2.4.18-14, copying over airo.c and airo-cs.c to my 2.4.20-8 kernel and re-compliling I get ANOTHER ERROR. WHY ME?!?!?

Code:

gcc -D__KERNEL__ -I/usr/src/linux-2.4.20-8/include -Wall -Wstrict-prototypes -Wno-trigraphs
-O2 -fno-strict-aliasing -fno-common -fomit-frame-pointer -pipe -mpreferred-stack-boundary=2 -march=i686 -falign-functions=0
-malign-jumps=0 -malign-loops=0 -DMODULE -DMODVERSIONS -include /usr/src/linux-2.4.20-8/include/linux/modversions.h
 -nostdinc -iwithprefix include -DKBUILD_BASENAME=airo  -DEXPORT_SYMTAB -c airo.c
cc1: warning: -malign-loops is obsolete, use -falign-loops
cc1: warning: -malign-jumps is obsolete, use -falign-jumps
airo.c: In function `netdev_ethtool_ioctl':
airo.c:3280: `ETHTOOL_GDRVINFO' undeclared (first use in this function)
airo.c:3280: (Each undeclared identifier is reported only once
airo.c:3280: for each function it appears in.)
airo.c:3281: variable `info' has initializer but incomplete type
airo.c:3281: warning: excess elements in struct initializer
airo.c:3281: warning: (near initialization for `info')
airo.c:3281: storage size of `info' isn't known
airo.c:3281: warning: unused variable `info'
make[3]: *** [airo.o] Error 1
make[3]: Leaving directory `/usr/src/linux-2.4.20-8/drivers/net/wireless'
make[2]: *** [_modsubdir_wireless] Error 2
make[2]: Leaving directory `/usr/src/linux-2.4.20-8/drivers/net'
make[1]: *** [_modsubdir_net] Error 2
make[1]: Leaving directory `/usr/src/linux-2.4.20-8/drivers'
make: *** [_mod_drivers] Error 2

Twenty bucks to whoever can get RFMOD working on an aironet 350 card in Redhat 9. Dead or alive.

über-noob · 11-14-2003, 11:38 PM

I even tried compiling the modules for 2.4.18-14 and loading them in 2.4.20 with the force switch (-f) and I STILL find no RFMON love. The modules refuse to load due to unresolved symbols.

I'm going to have to start all over with Redhat 8, aren't I? I cannot express my anger in words.

über-noob · 11-15-2003, 08:41 AM

Last rant on this... If I go with 2.4.18 I lose my ACPI functionality because I can't find any old patch files on sourceforge.

ahuebel · 01-21-2004, 04:02 PM

has anyone gotten a cisco 350 series adapter to do rfmon in redhat 9?

skymoe · 01-25-2004, 08:01 PM

Kismet comes with a pretty nice script that puts the Aironet 350 into RFMON mode. Install the kismet program and run this..

#!/bin/sh
ifconfig eth0 down
kismet_monitor -i eth0
ifconfig wifi0 up

It's the only way I know to do it. Chances are if you're trying to use monitor mode you're gonna want to play around with Kismet.

ahuebel · 01-26-2004, 09:34 AM

I will try this thanks. I have my orinoco gold b/g card working with airsnort, kismet, and ethereal in monitor mode using madwifi drivers. I sort of gave up on the cisco card. I heard kismet had a script but someone told me it was cisco_monitor or something liek that. anyway...I will try what you mention and report back.