Any Analyzer Software to work with AP350 NIC?

[aonibala]

Any recomendation for analyzer software that works with AP350 PCMCIA NIC?

Thanks,

Audie

[kgulka]

Network Associates Sniffer Pro - kind of pricey but works well...

[duchesne_ced]

ANy Linux software as ethereal.

I've read couple of web pages about setting up Aironet and ethereal but i can't get it works.

Does the 350 is 'promiscious capable' under linux ?

[bhesk]

Ethereal does work with Aironet 350 (and 340) series cards.

I've got it working fine under RedHat 7.3.

The most important thing is the drivers. If you use the latest Cisco drivers from cco, then promiscous mode does not work. You MUST use the drivers that ship in the Kernel build for 7.3 as these still have promiscous mode enabled.

Another piece of software called Kismet ships with two files called "cisco_monitor" and "cisco_unmonitor" that place the card in and out of promiscous mode.

You may find the following useful:

http://www.kismetwireless.net/archive.php?mss:435:200203:bgkigfmpaembcbnfmbhl

Note that you shouldn't need to rebuild your kernel if you are running 7.3. I hope you don't anyway because this will take several days (and lots of swearing) if you do...!

If you search through the forums as above, you should find mulitple sections on hints and tips on how to get this working. One thing that you do have to do is copy some of the driver files around:

>What i had to do was to copy

>/lib/modules/2.4.18-3/kernel/drivers/net/wireless/airo*

>to /lib/modules/2.4.18-3/kernel/driver/net/pcmcia/

Regards, Barry

[bmcmurdo]

I have used;

Sniffer from http://www.sniffer.com/products/sniffer-wireless/default.asp?A=3

Airopeek from http://www.wildpackets.com/products/airopeek

And AirMagnet ships with a (modified) Cisco NIC; http://www.airmagnet.com/

[ccie]

This "modification" seems to be a change in a SRAM or some type of NVRAM register. Once the card is modified by Airmagnet, the firmware can be upgraded or downgraded and still works fine with Airmagnet. How can the internal SRAM or NVRAM of a Cisco 350 PC Card be accessed, read, and written to?