Subject: ar9280+802.11na+ath9k+kismet don't capture data packets

From: Антон <[email-masked]>
Date: Mon, 25 Apr 2011 21:54:32 +0400

Hello!

The platform uses D-link DIR-825 Atheros AR7161, with two AR9280(802.11bgn and 802.11an)
kismet-2010-07-R1 is installed to OpenWrt Backfire Trunk. Used driver ath9k of compat-wireless-2011-04-19.
For tests I use D-Link Dir-825 AP and D-Link DWA-160. Connection speed is 300 Mbps at 36 channel.
Kismet captures PHY and Control packets, and don't capture the data packets.

/etc/config/wireless

config wifi-device radio0
option type mac80211
option channel 11
option macaddr 00:18:e7:ec:b0:5f
option hwmode 11ng
option hwmode_11n g
option htmode HT40+
list ht_capab HT40-
list ht_capab HT40+
list ht_capab HT20

config wifi-iface
option device radio0
option mode monitor

config wifi-device radio1
option type mac80211
option channel 36
option macaddr 00:18:e7:ec:b0:60
option hwmode 11na
option hwmode_11n a
option htmode HT40+
list ht_capab HT40-
list ht_capab HT40+
list ht_capab HT20

config wifi-iface
option device radio1
option mode monitor

device wlan0 entered promiscuous mode
device wlan1 entered promiscuous mode

iwconfig

wlan0 IEEE 802.11bgn Mode:Monitor Tx-Power=27 dBm
RTS thr:off Fragment thr:off
Power Management:on

wlan1 IEEE 802.11an Mode:Monitor Tx-Power=17 dBm
RTS thr:off Fragment thr:off
Power Management:on

Transferred to file 600 Mb
After that ifconfig issued:
ifconfig
wlan0 Link encap:UNSPEC HWaddr 00-18-E7-EC-B0-5F-00-47-00-00-00-00-00-00-0
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:9865 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:3043414 (2.9 MiB) TX bytes:0 (0.0 B)

wlan1 Link encap:UNSPEC HWaddr 00-18-E7-EC-B0-60-00-47-00-00-00-00-00-00-0
UP BROADCAST RUNNING PROMISC MULTICAST MTU:1500 Metric:1
RX packets:365275 errors:0 dropped:0 overruns:0 frame:0
TX packets:0 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:20117793 (19.1 MiB) TX bytes:0 (0.0 B)

Sniffing result:
MAC Src                  MAC Dst                Channel Signal Type Crypt                     Packets SSID
00:18:E7:FD:8E:D8   00:19:5B:7E:09:CE  6          -42      AP    WEP                    7629      q183
00:18:E7:FD:8E:DA  F0:7D:68:71:40:DC  36         -60      AP    TKIP WPA PSK... 1703      q183-media
1C:65:9D:21:27:8F    00:18:E7:FD:8E:D8   6         -65      AP     WEP                    2607      q183
00:00:00:00:00:00     00:18:E7:FD:8E:D8   -          -65      AP     -                           370415   -
00:19:5B:7E:09:CE   00:18:E7:FD:8E:D8   -          -67      Probe WEP                    124        q183
F0:7D:68:71:40:DC   00:18:E7:FD:8E:DA   -          -39     AP      TKIP WPA PSK... 41          q183-media

Captures the driver ath9k data packets in the mode 802.11na? Can be said about this with 100% certainty? Checked it?