On Fri, 2007-08-03 at 11:15 +0100, Andy Green wrote: > With the patch, injected packets have the same Monitor mode footprint > with hard or soft monitoring (you see the injected radiotap stuff) > because the synthesized "tx report" packet doesn't exist in the real > world shown by hard monitoring. I don't see why there's a distinction between hard and soft monitor mode. To me, hard monitor mode is basically "show me everything you can" while soft is "best effort". Soft monitor mode also makes no sense while no other interface is operating. The synthesized 'tx report packet' isn't that; the only synthesized thing is the radiotap header, the rest of the packet is what we actually sent and were thus unable to capture ourselves. > Acutually I think where it might all be heading is Michael Buesch's > method of selecting between hard and soft Monitor mode based on > IFF_PROMISC. Ah. I see. You're thinking of hard/soft monitor as something totally different than it is. Soft monitor really is only a hack for pseudo-softmac hardware that doesn't allow you to capture control packets while another interface is operating. johannes
Attachment:
signature.asc
Description: This is a digitally signed message part
