Keep in mind this requires drivers to honor mac80211's flag requests strictly, so drivers like ath5k and ath9k which still enable flags based on operation mode need to be fixed to take advantage of this. The nice thing about these type of alternative monitor interfaces is you can further extend radiotap even with vendor extensions to add more data to radiotap to help debug device specific features. Tcpdump -i fish0 -s 65000 -p -U -w /tmp/fishing.dump You can then request the user to use tcpdump on a session: Iw dev wlan0 interface add fish0 type monitor flags none A monitor interface with no additional monitor flags can be created as follows:
Say we want to help a user fish out data without affecting the device's performance by setting it to a full monitor interface. You can take advantage of the fact that a monitor interface in mac80211 uses radiotap to pass up to userspace additional data. For example, suppose you want to help a user. This can be very useful for debugging purposes on end user systems.
You can customize the type of monitor interface you create.
0 kommentar(er)
