Bug 131391 – net-analyzer/ethereal-0.99.0 Breaks Monitor Mode for IPW2200

• Status: RESOLVED FIXED
• Product: Gentoo Linux

[Description Nicholas Andrade 2006-04-26 16:28:51 UTC]

With ethereal 0.10.14-r1, setting the Intel IPW2200 B/G card to monitor mode (via iwconfig or iwpriv) functions as expected.  After upgrading to ethereal 0.99.0 and launching ethereal after putting the card into monitor, all 802.11 packets appeared from the same MAC address and all listed the the same MAC address as the destination (different from the source -- but in both cases the MAC addresses were ones that don't exist) and majority of the packets were listed as malformed.  Downgrading back to 0.10.14-r1 resolved the issue.  Ethereal 0.99.0 operated properly when card was not put into monitor mode.

[ebuild   R   ] net-wireless/ipw2200-1.1.2-r1  USE="-debug" 0 kB
[ebuild   R   ] net-wireless/ipw2200-firmware-3.0  0 kB
[ebuild   R   ] net-wireless/ieee80211-1.1.13-r1  USE="-debug" 0 kB
[ebuild   R   ] net-analyzer/ethereal-0.99.0  USE="gtk ipv6 ssl -adns -kerberos -snmp" 0 kB

[Comment 1 Henrik Brix Andersen 2006-04-30 11:00:00 UTC]

Problem confirmed.

[Comment 2 Daniel Drake (RETIRED) 2006-06-18 12:12:14 UTC]

Same here, zd1211rw driver which also uses radiotap headers

in-kernel ipw2200 which does not use radiotap does not exhibit this behaviour, so I'd guess that this is radiotap specific

[Comment 3 Henrik Brix Andersen 2006-06-18 12:17:09 UTC]

(In reply to comment #2)
> Same here, zd1211rw driver which also uses radiotap headers

Looks like a it is problem with ethereal, then.

[Comment 4 Daniel Black (RETIRED) 2006-07-20 02:40:01 UTC]

can someone please check the latest wireshark-0.99.2 before I report this upstream.

[Comment 5 Daniel Drake (RETIRED) 2006-07-20 13:59:37 UTC]

This is fixed in wireshark-0.99.2

[Comment 6 Daniel Black (RETIRED) 2006-07-20 17:01:50 UTC]

Thanks Daniel