User Tools

Site Tools


broadcom

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
broadcom [2007/11/15 00:27]
darkaudax
broadcom [2017/01/09 21:27] (current)
mister_x Mark page as deprecated.
Line 1: Line 1:
-=======Broadcom bcm43xx =======+====== DEPRECATED ====== 
 + 
 +**IMPORTANT NOTE**: This page is deprecated, updated documentation can be found [[install_drivers|here]] 
 + 
 +======= Broadcom bcm43xx ======= 
 + 
 +As of 2.6.17, a driver for the Broadcom bcm43xx wireless chipset has been included in the kernel. Older kernels can sometimes be made to work, check out resources available [[http://​bcm43xx.berlios.de|here]] While this driver natively supports monitor mode, it requires patching before packet injection can be done. After testing aireplay-ng with the patches, please contribute to the [[http://​forum.aircrack-ng.org/​index.php?​topic=281.0|forum thread]] by reporting any successes or failures there. 
 + 
 +**Note: As of 2.6.24, this driver is considered deprecated, and you might be better off using the new [[b43]] driver instead. (B43 supports the fragmentation attack, and it's much more stable than bcm43xx.)** 
 + 
 +===== Is My Card Supported? ===== 
 + 
 +Most broadcom cards are supported EXCEPT the following:​ 
 + 
 +  * PCI ID 14e4:4315 
 +  * Wireless-N 
 + 
 +To determine the PCI ID of your wireless device under linux, enter: 
 + 
 +  lspci -nn 
 + 
 + 
 +=====Alternate Patch===== 
 +There is a patch by SuD which dramatically improves the injection speed: 
 + 
 +    * See http://​www.latinsud.com/​bcm/​ 
 + 
 +Also see this [[http://​forum.aircrack-ng.org/​index.php?​topic=2845.msg18262#​msg18262|thread]] for more information. 
 + 
 +Use this patch instead of the one below.
  
-As of 2.6.17, a driver for the Broadcom bcm43xx wireless chipset has been included in the kernel. Older kernels can sometimes be made to work, check out resources available [[http://​bcm43xx.berlios.de|here]] While this driver natively supports monitor mode, it requires patching before packet injection can be done. After testing aireplay-ng with the patches, please contribute to the [[http://​tinyshell.be/​aircrackng/​forum/​index.php?​topic=281.0|forum thread]] by reporting any successes or failures there. 
  
 =====Patching the kernel===== =====Patching the kernel=====
-  * Download the bcm43xx inject_nofcs patch for the 2.6.20 kernel from [[http://tinyshell.be/aircrackng/forum/index.php?​action=dlattach;​topic=281.0;id=180|here]].+  * Download the [[http://www.latinsud.com/bcm/bcm43xx-injection-linux-2.6.20.patch|bcm43xx inject_nofcs patch]] for the 2.6.20 kernel.
   * Place the patch in your kernel sources directory   * Place the patch in your kernel sources directory
   * Run 'patch -p1 -i bcm43xx-injection-linux-2.6.20.patch'​.   * Run 'patch -p1 -i bcm43xx-injection-linux-2.6.20.patch'​.
Line 21: Line 49:
  
 Forum thread: ​ Forum thread: ​
-[[http://tinyshell.be/​aircrackng/​forum/​index.php?​topic=2045.0|The complete how to of making bcm43xx injection work]]+[[http://forum.aircrack-ng.org/​index.php?​topic=2045.0|The complete how to of making bcm43xx injection work]] 
 + 
 +Forum thread:  
 +[[http://​forum.aircrack-ng.org/​index.php?​topic=2845.0|How I got the bcm43xx packet injection working in ubuntu 7.10]] 
 + 
 +This forum thread may also provide some useful information:​ [[http://​forum.aircrack-ng.org/​index.php?​topic=281|Broadcom bcm43xx Injection]]
  
-This forum thread may also provide some useful information:​ [[http://​tinyshell.be/​aircrackng/​forum/​index.php?​topic=281|Broadcom bcm43xx Injection]] 
  
 =====Known problems===== =====Known problems=====
 The bcm43xx has been verified to produce all attacks. However, there a few known problems. The bcm43xx has been verified to produce all attacks. However, there a few known problems.
   * aireplay exits with "out of memory error" / syslog shows "out of DMA slots"   * aireplay exits with "out of memory error" / syslog shows "out of DMA slots"
-<​sub>​There is a problem in the bcm43xx driver when injecting packets using DMA access. I'll try to compile the mod without DMA and see what happens asap. I'll also make another patch soon that waits till the send buffer is empty before resuming after an error occured. Now it just waits a second before resuming at a lower rate.</​sub>​+<​sub>​There is a problem in the bcm43xx driver when injecting packets using DMA access. I'll try to compile the mod without DMA and see what happens asap. I'll also make another patch soon that waits till the send buffer is empty before resuming after an error occurred. Now it just waits a second before resuming at a lower rate.</​sub>​
   * packets per second is adjusted to around 25 pps   * packets per second is adjusted to around 25 pps
 <​sub>​Same problem as above, there is a problem with injection and DMA access.</​sub>​ <​sub>​Same problem as above, there is a problem with injection and DMA access.</​sub>​
Line 34: Line 66:
 <​sub>​ASSERTION FAILED (!ring->​suspended) at: drivers/​net/​wireless/​bcm43xx/​bcm43xx_dma.c:​71:​request_slot(). Again, a problem with DMA. Aireplay tries to write a packet, the driver wants a free DMA slot for that and can't because the DMA slots were all taken (the driver blocks all dma requests then).</​sub>​ <​sub>​ASSERTION FAILED (!ring->​suspended) at: drivers/​net/​wireless/​bcm43xx/​bcm43xx_dma.c:​71:​request_slot(). Again, a problem with DMA. Aireplay tries to write a packet, the driver wants a free DMA slot for that and can't because the DMA slots were all taken (the driver blocks all dma requests then).</​sub>​
  
 +All these problems should be mitigated or fixed with the new patch!
  
  
Line 48: Line 80:
 It will give you the fully qualified file name.  Do "ls -l <fully qualified file name>"​ and confirm it has the date/time of when you compiled and installed the new module. ​ If it does not match, then you are not running the patched module. ​ This would, of course, need to be fixed. It will give you the fully qualified file name.  Do "ls -l <fully qualified file name>"​ and confirm it has the date/time of when you compiled and installed the new module. ​ If it does not match, then you are not running the patched module. ​ This would, of course, need to be fixed.
  
-This thread has a number of potential fixes to problems you may encounter: [[http://​tinyshell.be/​aircrackng/​forum/​index.php?​topic=281|Broadcom bcm43xx Injection]]+This thread has a number of potential fixes to problems you may encounter: [[http://​forum.aircrack-ng.org/​index.php?​topic=281|Broadcom bcm43xx Injection]]
  
  
Line 59: Line 91:
   * Error message: "​ioctl(SIOCGIFINDEX) failed: No such device"​   * Error message: "​ioctl(SIOCGIFINDEX) failed: No such device"​
  
-Then [[http://​aircrack-ng.org/​doku.php?​id=faq#​why_do_i_get_ioctl_siocgifindex_failedno_such_device|See this FAQ entry]].+Then [[faq#​why_do_i_get_ioctl_siocgifindex_failedno_such_device|See this FAQ entry]].
  
  
  
  
broadcom.1195082825.txt.gz · Last modified: 2007/11/15 00:27 by darkaudax