> Well, I discover in fact you need to inject starting only from the > IEEE802.11 header... and indeed that does work if you do it on the > "Management Interface". I found this from hostapd sources, since > wpa_supplicant doesn't seem to inject packets from userspace, Never versions of wpa_supplicant should do this in the userspace MLME part. > it seems > to trigger the stack to do canned packets by a huge range of IOCTLs. So > I have unencrypted packets in both directions now without patching > anything on the kernel side :-D But, there is a but... :) > The packet seems to go out at a default rate, in my case 1Mbps. Is > there in fact a method for requesting the rate for injected packets, or > is there at the moment a simple equivalence that all broadcasts will go > out at 1Mbps? Looks like you're right, there doesn't seem to be a way. I always thought this was possible. I think you should raise this point on the mailing list again. I've proposed doing this through nl80211 to allow extensibility of the meta information (frame rate, ....) for an injected frame instead of conjuring up yet another meta information framework that transports frame across netdevs, but Michael strongly opposes the idea of transporting frames via anything but a netdev. I could post some code for nl80211 inject that doesn't control any meta information yet but at least has the capability of carrying it over to the stack. johannes
Attachment:
signature.asc
Description: This is a digitally signed message part