Broadcom bcm43xx Injection

[clearscreen]

Ok. Got it to work last night and let it run overnight. Got over a million read packets but just around 1200 ARP requests / IV's.. What gives?

[wzzrd]

I did the patching of the module (I have the inject_nofcs file) and of aireplay-ng (I've got the binary).

I can do airmon-ng, airodump-ng. I can do aireplay-ng to catch an ARP package (this is a very little used network, so catching a single one takes a few minutes). When I try to do the ARP attack, I see my card spewing loads of packages, but the Data counter in airodump doesn't go up. Well, hardly anyway. I've gotten to 123 IV's in over 10 minuten. That way it'll take me the better part of my life to break this thing...

I'm using Edgy with 2.6.17-10, a patched bcm43xx and a PCMCIA 4306. Does the version of the used firmware matter at all? Can this be done with a PCMCIA card?

[clearscreen]

I did the patching of the module (I have the inject_nofcs file) and of aireplay-ng (I've got the binary).

I can do airmon-ng, airodump-ng. I can do aireplay-ng to catch an ARP package (this is a very little used network, so catching a single one takes a few minutes). When I try to do the ARP attack, I see my card spewing loads of packages, but the Data counter in airodump doesn't go up. Well, hardly anyway. I've gotten to 123 IV's in over 10 minuten. That way it'll take me the better part of my life to break this thing...

I'm using Edgy with 2.6.17-10, a patched bcm43xx and a PCMCIA 4306. Does the version of the used firmware matter at all? Can this be done with a PCMCIA card?

Yep, same for me... almost 9 million packets but just 1200 arp requests

[uovobw]

hi guys.
I've been reading around netdev and various kernel development-related mailing lists lately and i found out a pair of useful things:
http://lwn.net/Articles/202399/ -> the new netlink wireless stack and a new configurations subsystem called cfg80211/nl80211 are coming to the kernel mainline, supporting injection natively.
http://osdir.com/ml/bcm43xx-dev@lists.berlios.de/msg02465.html -> the bcm43xx code already supports this new stack and there are patches available.
Since the new stack/subsystem will soon be mainline - at least in the dev tree - is there anyone willing to test the new patches and the new injection methods in order to study and find out how to migrate the existing aircrack-ng bcm43xx injection patches to the new method?
someone that can understand the patches and the new concepts can suggest what needs to be done? the possible problems?

[hijinks]

I just got a HP dv2120us laptop that came with the broadcom 4311. Looks like it works with Ubuntu Edgy out of the box but I wrote up a bit out a howto on how to get it working with a fresh 2.6.18.1 kernel.. I'd like to see injection working with this version and not .17

Here is the howto first of all

http://www.zcentric.com/blog/2006/12/get_the_broadcom_bcm4311_to_wo_1.html

I don't consider myself a big kernel hacker but I know my way around it so if anyone wants to work with me on trying to get it working I'm all for it. I found all the patches for .17 to cause the card to just lockup.. it seems a bit stable with the set of patches I applied.

You can reach me at the following the best

email: mike [at] zcentric.com
aim: hijinks7

[uovobw]

I just got a HP dv2120us laptop that came with the broadcom 4311. Looks like it works with Ubuntu Edgy out of the box but I wrote up a bit out a howto on how to get it working with a fresh 2.6.18.1 kernel.. I'd like to see injection working with this version and not .17
SNIP

i'm glad you got it to work and that you decided to post the procedure, but we're discussing the method and patches to make the bcm43xx driver support packet injection.

[clearscreen]

bcm43xx_d80211 doesn't support cfg80211 as of yet

[deags]

I just went to all the trouble of patching the driver and aircrack and making a live CD for my comp(has no linux partition). It freezes when trying to load the patched driver.

[blu.sockz]

Hie all,

I hope this thread is still going on. Newbie here - a few quetions to ask.
I have read all the posting here in this thread but still quite confused.
Im using Compaq nx9010 with BCM94301MPL as the network device. Im not too sure whether this card is using bcm43xx chipset.
Im using 'BRCM Wireless Driver v3.40.100.0 Beta' driver from http://www.wildpackets.com/ to use aircrack-ng and airodump-ng. Im able to capture packets on the network with only a few thousands IVs a day, and from what i read, at least 1 millions of IVs is preferable to crack WEP key. I need to use Packet Injection to help out.
question - Is my card able to do packet injection (with driver patches...) using airreplay-ng ? If yes, pls show some guide as to where to download and what patches and other changes is COMPULSORY. thanks for replying. 

[blu.sockz]

by the way, im using Windows XP SP2, shall u all need any other information, i'll be replying soon after. thanks dude...

[Yildirim]

Hey,

How is the development of the bcm43xx injection going? Does the patch work for kernel 2.6.20-rc5 also? or do I have to downgrade to 2.6.17... Any updates on the patch?

cheers
Jinn

[Gatto]

aircrack 0.7 need patch for use bcm43xx for injection?

[Samioul]

AFAIK, AirCrack-NG 0.7 includes all the patches from the forum, thus AirCrack-NG doesn't need to be patched anymore for packet injection... But it only concerns AirCrack patching, your BCM43xx drivers still need to be patched !!!

Note that this is only supposition, as I was unable to get packet injection working on my Ubuntu Edgy 2.6.10. I followed the instructions given in this topic, but gave up as I never got able to patch BCM43xx drivers : the patch couldn't be applied automatically, and I couldn't manage to apply it manually either. Could someone plz send more detailled instructions or even a how-to

Thanks in advance...

[wizputer]

Here's my bcm43xx_main.c that compiles on 2.6.20, however injection doesn't seem to work with my 4306 chipset 

[xanceto]

I recompiled with 2.6.20 with yours bcm43xx_main and injection doesnt work with 4311 too.

I'll further more test it today.
UPDATE:
It works