Somebody in the thread at some point said: > On Tuesday 31 July 2007, Ulrich Kunitz wrote: >> What about add_interface/remove_interfaces and monitor interfaces? >> >> There seems to be difference between "hard" and "soft" monitor >> mode. Currently I'm not sure what the semantics is. There seems to >> be also calls to add_interface/remote_interface with if_id -1. I >> guess that means something like all interfaces. The expected >> behaviour is not documented for that case. > I don't know what you mean by hard/soft monitor. Currently there are two distinct kinds of "monitor mode" result returned by zd1211rw-mac80211 and iwl3945 at least. The "hard" one to use Ulrich's name is what you want to see with Monitor mode, the physical device is in hardware promisc and you see all kinds of beacons and foreign network encrypted packets. The "soft" one is a faked up repeating of incoming (and outgoing! twice!) packets that happen to be around during the filtered operation of the device, in the case where the device operates as Managed and is not in hardware promisc. In this mode, you see only your associated station beacons and your own packets, not even packets from other stations on your AP. You get "hard" monitoring when you have only one virtual interface and it is in monitor mode. You get "soft" bogus monitoring when your monitor mode interface is a second virtual one. I posted a few times about this last week giving details of what you get under what circumstances. It really would be much better if the device is kicked to hardware promisc if ANY virtual interface is in Monitor mode, therefore the results are consistent regardless of the number of virtual interfaces that happen to be around. -Andy - To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
