1 Topic by baconite

  • baconite
  • Member
  • Offline
  • Registered: 2022-10-08
  • Posts: 11

Topic: Hermes chipset airodump-ng capturing

Hi, airodump-ng stops capturing after about 18 to 20 beacons. Driving me nuts trying to figure out why have done everything:  Removed Network Manager, removed wpa supplicant, ect. If anyone can point me in a direction to the solution, i will be very grateful. Thx

distro:               Ubuntu 6.06.1 LTS
kernel:               2.6.15-26-386
card chipset:       Hermes1
firmware:           8.72
driver:                0.15rc4 (0.15 will NOT compile)
aircrack-ng:        0.9 (1.0 will NOT compile)

2 Reply by lockoff

  • lockoff
  • Administrator
  • Offline
  • Registered: 2022-04-05
  • Posts: 41

Re: Hermes chipset airodump-ng capturing

Hi baconite.
Right now, nothing elegant comes to my mind, but to use kismet (should be in repository) to dump traffic (defaultly as timestamp.dump which is the same format as .cap so it can be normally processed by aircrack package programs). Don’t forget to set the source card in kismet.conf and you might also want to turn of dumping the beacons. Your choice.

limit exposure to this area and report abnormalities in your life after exposure

3 Reply by baconite

  • baconite
  • Member
  • Offline
  • Registered: 2022-10-08
  • Posts: 11

Re: Hermes chipset airodump-ng capturing

lockoff wrote:

Right now, nothing elegant comes..

Lockoff thanks for response. Well Kismet gives me the same results … captures packets for about 5 seconds then nothing.

4 Reply by 4fce

  • 4fce
  • New member
  • Offline
  • Registered: 2022-08-07
  • Posts: 2

Re: Hermes chipset airodump-ng capturing

hi beconite, you forgot to post info about what module you have loaded (command lsmod).. sometimes modules fight (for example autoload orinoco and prism together decay each other) and you need to put one of them in the blacklist.

5 Reply by baconite

  • baconite
  • Member
  • Offline
  • Registered: 2022-10-08
  • Posts: 11

Re: Hermes chipset airodump-ng capturing

4fce wrote:

hi beconite, you for got post info..

For most of the tests, lsmod reported variations of the following:

lsmod | grep orinoco
                      orinoco_cs            17928    1
              orinoco        43156    1
              hermes        7808    2
              pcmcia        40508    2

I have never received any prism output? Is there something i’m missing here? Everything ive read tells me that something competing for monitor mode … yet if i terminate airodump-ng, iwconfig still reports monitor mode. Strangely, iwpriv does NOT show a monitor method? How can iwconfig put the card into monitor mode and iwpriv NOT show the method? Anyway, if i dont get any better info, im installing fedora core 2 now and going back to an earlier time with this card.  if that doesnt work, planning on forking up $121 for Ubiquiti’s SRC from pasadena networks.

Do u have any good recommendations for a PCMCIA card with external antenna connector (preferably MC-Card type)? Thanks for your feedback

6 Reply by lockoff

  • lockoff
  • Administrator
  • Offline
  • Registered: 2022-04-05
  • Posts: 41

Re: Hermes chipset airodump-ng capturing

See. I knew I forgot about something – the module conflict. Well, my output of lsmod is

#lsmod|grep orinoco
orinoco_cs             15844  1
orinoco                36084  1 orinoco_cs
hermes                  7008  2 orinoco_cs,orinoco
pcmcia                 34140  1 orinoco_cs
pcmcia_core            36852  4 orinoco_cs,pcmcia,yenta_socket,rsrc_nonstatic

I replaced the firmware with some older one (I think) and enabled the 128bit key making it Orinoco Gold and enabled all 14 channels using some Windows firmware loading/editing utility for the card. I have not tried out using the card under Linux before this procedure, but after this it worked out of the box (no module conflict) under Debian and BackTrack 2.

I will try to find out the firmware version I use. (I also had problems compiling- always cycled-in until ran out of swap.)

limit exposure to this area and report abnormalities in your life after exposure

7 Reply by baconite

  • baconite
  • Member
  • Offline
  • Registered: 2022-10-08
  • Posts: 11

Re: Hermes chipset airodump-ng capturing

lockoff wrote:

See. I knew I forgot about something – the module conflic..

Lockoff, Thanks. Well i have read that the firmware could be the culprit, too.  But the question is, how do I upload older firmware to the card?  I think i need Windows to do that, no? Can u point me to a guide for this? Thanks again.

8 Reply by 4fce

  • 4fce
  • New member
  • Offline
  • Registered: 2022-08-07
  • Posts: 2

Re: Hermes chipset airodump-ng capturing

The best way? Ask for tools at producer support page. It is safe and without complications.. It exist flash.exe file for firmwware handling in older (Avaya) wireless adapters.. but (some information you can gain with Google) some cards are not supported and flash cause error..

9 Reply by lockoff

  • lockoff
  • Administrator
  • Offline
  • Registered: 2022-04-05
  • Posts: 41

Re: Hermes chipset airodump-ng capturing

There it is. airsnort.shmoo.com/orinocoinfo.html the second bullet from the bottom talks about this Orinoco issue and here is the win executable I think I’ve used ftp.lucky.net/pub/radio/software/ORINOCO/PC_Card/Firmware/R7.0spring2001/

limit exposure to this area and report abnormalities in your life after exposure

10 Reply by baconite

  • baconite
  • Member
  • Offline
  • Registered: 2022-10-08
  • Posts: 11

Re: Hermes chipset airodump-ng capturing

lockoff, ok thx for the suggestion.  well ive actually abandoned the Orinoco now that ive got my Alfa AWUS036H. Wwhat a beauty this little sucker is. Drivers worked out of the box and Backtrack 2 also booted up to it without a hitch. Using an external antenna, I have picked up signals a half-mile away. Anybody wanna buy a Gold Card?  He he..