User Tools

Site Tools


iwl4965

This is an old revision of the document!


iwl4965

Intel Wireless WiFi Link 4965AGN

People have had limited success up to this point. For now, search the Forum for “4965” to get the most up-to-date information.

The first reported success and how to do it is in this thread message.

A more recent success story is in this message including detailed steps. This one summarizes the the steps for Ubuntu 8.04. Another one.

Detailed HowTo

This is how you can get the Intel WiFi Link 4965AGN card to inject under Linux using the iwlwifi drivers. Please note that the injection is still under development, but is possible at this point. The only attack which seems to fail as of now is 9 - the injection test.

What you need :

  • the kernel source, or at least the headers (⇒ 2.6.25, the guide is based on 2.6.25.9),
  • compat-wireless (the guide is based on version 2008-06-25 : the patches MAY NOT - and probably will not - work on other versions),
  • aircrack-ng (⇒ RC1),
  • basic development tools (make, gcc, …),
  • injection patches for the drivers.

Please note that the instructions provided here are suited for generic Linux. Your distribution, especially if it uses some kind of advanced package managing (Debian, Ubuntu, etc.), may have the needed packages in its repositories (so that you don't need to compile them manually from source).

Preparing the kernel

You need to make sure that your kernel configuration includes these options. Pay attention which are to be build as modules and which can be built-in.

 Networking -> Wireless :
 [M] Improved wireless configuration API
 [*]   nl80211 new netlink interface support
 [*] Wireless extensions
 [M] Generic IEEE 802.11 Networking Stack (mac80211)
 [M] Generic IEEE 802.11 Networking Stack (DEPRECATED)
 [M]   IEEE 802.11 WEP encryption (802.1x)
 [M]   IEEE 802.11i CCMP support
 [M]   IEEE 802.11i TKIP encryption
 [M]   Software MAC add-on to the IEEE 802.11 networking stack

It may also be useful to enable “Automatic kernel module loading” under “Loadable module support” in order to eliminate any module dependency related problems later on.

At this point, it is assumed that you've got your kernel properly configured, up and running right now.

Compiling the drivers

The development versions of the drivers are a part of the compat-wireless project. We will need the version of the package from 25 June 2008, which can be obtained here:

 http://www.orbit-lab.org/kernel/compat-wireless-2.6/2008/06/compat-wireless-2008-06-25.tar.bz2. 

Having downloaded them, we need to download the patches for the iwlwifi drivers and the fragmentation patch for mac80211. The latter is available on http://patches.aircrack-ng.org (get the 2.6.26-rc8-wl version). The first one, however, is available here : http://pastebin.com/f1270a2e0 (make sure you hit “download” and get the file instead of copying & pasting).

 wget http://www.orbit-lab.org/kernel/compat-wireless-2.6/2008/06/compat-wireless-2008-06-25.tar.bz2
 bunzip2 compat-wireless-2008-06-25.tar.bz2
 tar xf compat-wireless-2008-06-25.tar
 cd compat-wireless-2008-06-25
 patch -p1 < ../f1270a2e0.txt
 patch -p1 < ../mac80211_2.6.26-rc8-wl_frag.patch
 make
 rmmod iwl4965 [as root!]
 make install
 modprobe iwl4965 [as root!]

That should get you the patched driver module up and running, you should also see “wlan0” and “wmaster0” as your interfaces, the first one should also be available by using iwconfig.

Injecting

Due to the way how mac80211 works, you cannot inject on the card's “stock” interface - wlan0. This is where the airmon-ng tool comes in handy. It will create a mon0 interface suited for injecting after running it this way :

 airmon-ng start wlan0 [as root!]

It may complain about the “iw” program missing. If it does, the link is provided, so just download and compile it. The “iw” program, however, requires the “nl” libraries, available here : http://people.suug.ch/~tgr/libnl/. If you have it all, run the program again, and it should give you output somewhat similar to this :

 airmon-ng start wlan0
 Interface	Chipset		Driver
 
 wlan0		Intel 4965 a/b/g/n	iwl4965 - [phy0]
			(monitor mode enabled on mon0)

If that's how it looks, you're good to go. The mon0 interface can be used for both listening with airodump-ng and injecting with aireplay-ng.

iwl4965.1214919236.txt.gz · Last modified: 2008/07/01 15:33 by darkaudax