Differences

This shows you the differences between two versions of the page.

--- wesside-ng [2007/06/19 18:34] – fixed typo mister_x
+++ wesside-ng [2008/02/08 16:06] – fixed typos darkaudax
@@ Line 10: / Line 10: @@
 ++++++ IMPORTANT ++++++\\
 ++++++ IMPORTANT ++++++\\
@@ Line 18: / Line 19: @@
 The original wesside tool was written by Andrea Bittau and was a proof-of-concept program to accompany two published papers.  The two papers are "The Fragmentation Attack in Practice"  by Andrea Bittau and "The Final Nail in WEP's Coffin" by Andrea Bittau, Mark Handley and Josua Lockey.  See the the [[http://aircrack-ng.org/doku.php?id=links|links page]] for these papers and more.  The papers referenced provide excellent background information if you would like to understand the underlying methodologies.  The concepts for the fragment attack currently incorporated in aircrack-ng came from these papers.
-For you trivia buffs, who knows where the name "wesside" came from?  As it turns out, it comes from tupac the rapper (2Pac / Tupac Shakur).
+For you trivia buffs, who knows where the program name "wesside" came from?  As it turns out, it comes from tupac the rapper (2Pac / Tupac Shakur).
 Wesside-ng has been updated to reflect advances in determining the WEP key.  Here are the steps which wesside-ng takes:
@@ Line 37: / Line 38: @@
   * Fake MAC functionality is broken if there is a lot of traffic on the network.
-Please remember that this is still basically a proof-of-concept tool so you can expect to find bugs. Plus you will find features that don't quite work as expected.
+Please remember that this is still basically a proof-of-concept tool so you can expect to find bugs. Plus you will find features that don't quite work as expected. Consider using [[easside-ng]] as an alternative or a companion program.  Easside-ng is considered relatively stable software.
@@ Line 49: / Line 50: @@
   *-a             Source MAC address (Optional)
   *-c              Do not start aircrack-ng.  Simply capture the packets until control-C is hit to stop the program!  (Optional)
+  *-f              Allows the highest channel for scanning to be defined.  Defaults to channel 11. (Optional)
+  *-k              Ignores ACKs since some cards/drivers do not report them.  It will therefore automatically retransmit X times.  That is, -k 1 will transmit once and assume the packet gets there.  -k 2 will retransmit twice, and so on.  Note: The higher the -k value, the slower transmission rate will be due to the many retransmits.  (Optional)
   *-p              Determines the minimum number of bytes of PRGA which is gathered.  Defaults to 128 bytes.  (Optional)
-  *-v              Wireless access point MAC address  (Optional)
   *-t              For each number of IVs specified, restart the airecrack-ng PTW engine. (Optional)
-  *-f              Allows the highest channel for scanning to be defined.  Defaults to channel 11. (Optional)
+  *-v              Wireless access point MAC address  (Optional)
 When you run wesside-ng, it creates three files automatically in the current directory when run the program:
   * wep.cap - The packet capture file.  It contains the full packet, not just the IVs.
-  * prga.log - Contains the PRGA obtained through the fragmentation attack.  This can be used as input to other aircrack-ng suite tools which require PRGA as input.  You can also use the PRGA from other tools for this file.
+  * prga.log - Contains the PRGA obtained through the fragmentation attack.  The following is NOT correct.  It is a future feature: "This can be used as input to other aircrack-ng suite tools which require PRGA as input.  You can also use the PRGA from other tools for this file."
   * key.log - Contains the WEP key when it is found.
@@ Line 137: / Line 140: @@
 ===== Usage Tips =====
-None at this time.
+==== Using the -k option ====
+Some cards/drivers do not properly report ACKs.  The "-k" option allows ACKs to be ignored and forces wesside-ng to retransmit the packets the number of times specified.  It will therefore automatically retransmit X times.  That is, -k 1 will transmit once and assume the packet gets there.  -k 2 will retransmit twice, and so on.  Note: The higher the -k value, the slower transmission rate will be due to the many retransmits.
+Some specific cases:
+  * If you get MAX retransmits error, try -k 1.
+  * If you have a poor connection, try -k 3.
+In general, you can experiment with different values to determine if it resolves the problem.  There is no right or wrong value.
 ===== Usage Troubleshooting =====
+==== General ====
 Make sure your card is in monitor mode.
@@ Line 155: / Line 168: @@
   * Only B and G networks are supported.
   * Fake MAC functionality is broken if there is a lot of traffic on the network.
+==== "ERROR Max retransmists" message ====
+You get an error similar to the following while running the program:
+[18:23:49] ERROR Max retransmists for (30 bytes):
+B0 00 FF 7F 00 1A 70 51 B0 70 00 0E 2E C5 81 D3 00 1A 70 51 B0 70 00 00 00 00 01 00 00 00
+This can be caused if the AP does not acknowledge the the packets you are sending.  Try getting closer to the AP.
+Another reason is that the internal state machine of wesside-ng is confused.  This typically happens when there is other wireless packets picked up and the state machine does not properly interpret them.  Remember, this is still proof-of-concept code and not completely stable.  Just try rerunning wesside-ng.
+==== RT73 chipset and "ERROR Max retransmists" message ====
+If you are using the RT73 chipset, try adding the "-k 1" option.  The driver for this chipset does not properly report ACKs.  Using the "-k 1" option gets around this.
+==== Known Bugs ====
+There are are a variety of known bugs which are outlined below.  As well, the state engine is known to be broken and this leads to unpredictable results.
+   Errors in wesside-ng with madwifi-ng
+   http://trac.aircrack-ng.org/ticket/306
+   "Error Wrote 39 out of 30" error message from wesside-ng
+   http://trac.aircrack-ng.org/ticket/303
+   wesside-ng finds, and attempts to process, WPA APs
+   http://trac.aircrack-ng.org/ticket/295