airsnort woes

Mirlyn · 11-17-2003

Slack 9.1 using a orinoco silver to monitor my wep-based setup.

I'm trying to get airsnort to work, but nothing seems to be looking up. Previously, Airsnort would load and capture packets. However, it only would get 10 interesting packets. It would continue to receive them (count would still increase), but never display more than 10 weak packets. I tried using Kismet to capture the weak packets and then loading the dump file in Airsnort but it would do a segmentation fault.

I read that Airsnort had issues with a certain firmware of the orinocos, so I tried flashing it in Server 2003 (only system i have with pcmcia). I finally got it flashed to 7.52. I then tried a different set of patched pcmcia drivers (3.2.1) per Airsnorts site. Now it shows segmentation fault every time I try to scan.

I tried the windows version, but just downloading it made me feel dirty.

It seems to be a highly undocumented piece of software, and everything I find online is people asking unanswered questions. Am I missing something here? Got any suggestions? While I've done lots of linux-based stuff before, I'm a noob at this patching source stuff.

Thanks all

TheSovereign · 11-18-2003

use the 6ish firmware on the orinoco
make sure u have correctly patched your drivers
keep in mind that if u updated your kernel your patches will be overwritten also if youve updated your pcmcia services drivers the same will occur

Mirlyn · 11-18-2003

I could never get orinocowireless.com's flashes to work. It always said no driver found (probably because I was using 2003 with Avaya's 2000 drivers). I ended up using the only flash I could find, from Agere. Got any links to the 6.xx firmwares that aren't from orinocowireless.com?

I am running 2.4.22, but I rebuilt the pcmcia drivers (3.2.1), applied the patch for those drivers, did the orinoco patch as described on the airnort site.

King_Ice_Flash · 12-16-2003

I found you can't flash the avaya cards with the orinoco firmwar. The chipset is the same, but they changed something.

Dreadnaught · 12-17-2003

I've been trying for a long time to get my card, a Dell-TrueMobile 1150 - reflashed with the latest orinoco firmware (rel. 7.6, firmware v. 8.72), and the latest driver, to work with kismet and airsnort. Finally got it to work using Knoppix 3.3. It uses kernel 2.4.22-xfs, which is the only difference I can see between the various knoppix versions I have tried. I see you're using slackware so I don't know if this would be any help, just wanted to pass it along.

King_Ice_Flash · 12-24-2003

Yah, I had to flash mine too, if you need the application, just ask, I got it on my hard drive. This will update it to the 8.10 firmware, and also with this version (of the updater), you don't have to mess around with the flash app files. You need to use Orinoco drivers and a third party device flasher. (Although I have heard rumors that proxim has a universal utility that I haven’t found yet).

I tried updating it to the 8.72, but it didn't work in fedora with kismet, so I had to downgrade to the .10 ver

Hope this makes sense to you, I can't figure out how to word it in proper English. (too much "eggnog")

11-17-2003	#1 (permalink)
Mirlyn social engineer Join Date: Aug 2002 Location: Wichita, Kansas Posts: 48	airsnort woes Slack 9.1 using a orinoco silver to monitor my wep-based setup. I'm trying to get airsnort to work, but nothing seems to be looking up. Previously, Airsnort would load and capture packets. However, it only would get 10 interesting packets. It would continue to receive them (count would still increase), but never display more than 10 weak packets. I tried using Kismet to capture the weak packets and then loading the dump file in Airsnort but it would do a segmentation fault. I read that Airsnort had issues with a certain firmware of the orinocos, so I tried flashing it in Server 2003 (only system i have with pcmcia). I finally got it flashed to 7.52. I then tried a different set of patched pcmcia drivers (3.2.1) per Airsnorts site. Now it shows segmentation fault every time I try to scan. I tried the windows version, but just downloading it made me feel dirty. It seems to be a highly undocumented piece of software, and everything I find online is people asking unanswered questions. Am I missing something here? Got any suggestions? While I've done lots of linux-based stuff before, I'm a noob at this patching source stuff. Thanks all

11-18-2003	#2 (permalink)
TheSovereign Master of the universe Join Date: Jun 2002 Location: chicago Posts: 658	use the 6ish firmware on the orinoco make sure u have correctly patched your drivers keep in mind that if u updated your kernel your patches will be overwritten also if youve updated your pcmcia services drivers the same will occur __________________ SO SAYS TheSovereign

12-16-2003	#4 (permalink)
King_Ice_Flash Alien Paranoid Stumbler Join Date: May 2003 Location: WI Posts: 2,629	I found you can't flash the avaya cards with the orinoco firmwar. The chipset is the same, but they changed something. __________________ "Yeah," said a voice from under the table, "you go to pieces so fast people get hit by the shrapnel."

12-24-2003	#6 (permalink)
King_Ice_Flash Alien Paranoid Stumbler Join Date: May 2003 Location: WI Posts: 2,629	Yah, I had to flash mine too, if you need the application, just ask, I got it on my hard drive. This will update it to the 8.10 firmware, and also with this version (of the updater), you don't have to mess around with the flash app files. You need to use Orinoco drivers and a third party device flasher. (Although I have heard rumors that proxim has a universal utility that I haven’t found yet). I tried updating it to the 8.72, but it didn't work in fedora with kismet, so I had to downgrade to the .10 ver Hope this makes sense to you, I can't figure out how to word it in proper English. (too much "eggnog") __________________ "Yeah," said a voice from under the table, "you go to pieces so fast people get hit by the shrapnel." Last edited by King_Ice_Flash : 12-24-2003 at 08:59 PM.

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

11-18-2003	#3 (permalink)
Mirlyn social engineer Join Date: Aug 2002 Location: Wichita, Kansas Posts: 48	I could never get orinocowireless.com's flashes to work. It always said no driver found (probably because I was using 2003 with Avaya's 2000 drivers). I ended up using the only flash I could find, from Agere. Got any links to the 6.xx firmwares that aren't from orinocowireless.com? I am running 2.4.22, but I rebuilt the pcmcia drivers (3.2.1), applied the patch for those drivers, did the orinoco patch as described on the airnort site.

12-17-2003	#5 (permalink)
Dreadnaught Registered Member Join Date: Sep 2003 Posts: 23	I've been trying for a long time to get my card, a Dell-TrueMobile 1150 - reflashed with the latest orinoco firmware (rel. 7.6, firmware v. 8.72), and the latest driver, to work with kismet and airsnort. Finally got it to work using Knoppix 3.3. It uses kernel 2.4.22-xfs, which is the only difference I can see between the various knoppix versions I have tried. I see you're using slackware so I don't know if this would be any help, just wanted to pass it along.