root@OpenWrt:~# tcpdump -vv -i kis
tcpdump: WARNING: kis: no IPv4 address assigned
tcpdump: listening on kis, link-type IEEE802_11_RADIO (802.11 plus BSD radio information header), capture size 96 bytes
0 packets captured
2 packets received by filter
0 packets dropped by kernel
root@OpenWrt:~# iwconfig
lo no wireless extensions.
eth0 no wireless extensions.
eth0.0 no wireless extensions.
eth0.1 no wireless extensions.
wifi0 no wireless extensions.
ppp0 no wireless extensions.
kis IEEE 802.11g ESSID:""
Mode:Monitor Frequency:2.422 GHz Access Point: 00:0F:xx:xx:xx:xx
Bit Rate:0 kb/s Tx-Power:20 dBm Sensitivity=0/3
Retry:off RTS thr:off Fragment thr:off
Encryption key:off
Power Management:off
Link Quality=0/94 Signal level=-95 dBm Noise level=-95 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:0 Missed beacon:0
root@OpenWrt:~# kismet_server
Suid priv-dropping disabled. This may not be secure.
No specific sources given to be enabled, all will be enabled.
Enabling channel hopping.
Enabling channel splitting.
Source 0 (AtherosG): Enabling monitor mode for madwifi_g source interface wifi0 channel 6...
NOTICE: Created Madwifi-NG VAP kis
WARNING: wifi0 appears to be using Madwifi-NG. Some versions of the Madwifi-NG drivers have problems in monitor mode, especially if non-monitor VAPs are active. If you experience problems, be sure to try the latest versions of Madwifi-NG and remove other VAPs
Source 0 (AtherosG): Opening madwifi_g source interface kis...
Allowing clients to fetch WEP keys.
NOTICE: bind address not specified, using INADDR_ANY.
Logging networks to Kismet-Nov-26-2006-1.network
Logging networks in CSV format to Kismet-Nov-26-2006-1.csv
Logging networks in XML format to Kismet-Nov-26-2006-1.xml
Logging cryptographically weak packets to Kismet-Nov-26-2006-1.weak
Logging cisco product information to Kismet-Nov-26-2006-1.cisco
Logging data to Kismet-Nov-26-2006-1.dump
Writing data files to disk every 300 seconds.
Mangling encrypted and fuzzy data packets.
Tracking probe responses and associating probe networks.
Reading AP manufacturer data and defaults from /etc/kismet/ap_manuf
Reading client manufacturer data and defaults from /etc/kismet/client_manuf
Dump file format: wiretap (local code) dump
Crypt file format: airsnort (weak packet) dump
Kismet 2006.04.R1 (Kismet)
Logging data networks CSV XML weak cisco
Listening on port 2501.
Allowing connections from 192.168.2.100/255.255.255.255
Registering builtin client/server protocols...
Registering requested alerts...
Registering builtin timer events...
Gathering packets...
Accepted interface connection from 192.168.2.100
root@OpenWrt:~# iwlist ath0 scan
ath0 Scan completed :
Cell 01 - Address: 00:15:xx:xx:xx:xx
ESSID:"FRITZ!Box Fon WLAN 7170"
Mode:Master
Frequency:2.437 GHz (Channel 6)
Quality=3/94 Signal level=-92 dBm Noise level=-95 dBm
Encryption key:on
Bit Rates:1 Mb/s; 2 Mb/s; 5.5 Mb/s; 11 Mb/s; 22 Mb/s
6 Mb/s; 9 Mb/s; 12 Mb/s; 18 Mb/s; 24 Mb/s
36 Mb/s; 48 Mb/s; 54 Mb/s
Extra:bcn_int=100
IE: WPA Version 1
Group Cipher : TKIP
Pairwise Ciphers (1) : TKIP
Authentication Suites (1) : PSK