Aircrack-ng forum

Please login or register.

Login with username, password and session length
Advanced search  

News:

Aircrack-ng 1.7 release

Sorry Guest, you are banned from posting and sending personal messages on this forum.
This ban is not set to expire.
Pages: [1]   Go Down

Author Topic: radio tap header  (Read 2497 times)

dark_matter

  • Newbie
  • *
  • Offline Offline
  • Posts: 2
radio tap header
« on: September 03, 2017, 03:30:13 pm »

Hope I'm asking in the right place.
I've searched around re "radio tap headers" & only found it mentioned in relation to already captured packets.

Astsam's driver/s for Alfa AWUS036ACH / rtl8812au/14au instruct :
"to inject frames with b/g rates use the Rate field in the radiotap header"
"to inject frames with n rates use the MCS field in the radiotap header"
"to inject frames with ac rates use the VHT field in the radiotap header"

It looks like the headers are in the actual wi-fi driver. Is this correct ?
I tried opening some files eg: .ko etc but couldn't see anything immediately obvious.
I ran some commands for " iw list, iw help " etc & found MCS & VHT in the output.
Bit of a noob. No further clue.
How do we "use the field in the radio tap header" to inject eg: to 5ghz / VHT ??
Any help appreciated.
Logged

misterx

  • Aircrack-ng Author
  • Administrator
  • Hero Member
  • *****
  • Offline Offline
  • Posts: 1955
  • Aircrack-ng Author
    • Aircrack-ng
Re: radio tap header
« Reply #1 on: September 03, 2017, 06:46:05 pm »

So, when you want to inject frames, you need to add headers to them (as in protocol, not file content) to indicate what rates you want to send them at.

You need to learn the format of a 802.11 frame as well as radiotap header. Look on wireshark wiki for sample files.
Logged

dark_matter

  • Newbie
  • *
  • Offline Offline
  • Posts: 2
Re: radio tap header
« Reply #2 on: September 05, 2017, 12:36:11 pm »

Thanks for helping out.
Of course, your answer raises more questions :)
Is this "packet injection" the same packet as aireplay-ng sends to an AP for deauthentication ?
... or is that a different process ?
Heading over to wireshark wiki to check it out.
Logged

misterx

  • Aircrack-ng Author
  • Administrator
  • Hero Member
  • *****
  • Offline Offline
  • Posts: 1955
  • Aircrack-ng Author
    • Aircrack-ng
Re: radio tap header
« Reply #3 on: September 05, 2017, 11:16:34 pm »

Packet injection is the opposite of what airodump-ng. It's a generic term. The deauthentication is one of the different packets of 802.11.

- radiotap.org
- Google 802.11 frame structure.
Logged
Pages: [1]   Go Up