Red Hat Linux 9.0 + FakeAP HOWTO

Modified for FakeAP  February 18 2004
[email protected]  

Description

The primary goal of this How-To is to install and configure Red Hat Linux 9.0 with FakeAP  These instructions were created using the following hardware: Asus P4PE-V, Pentium 4 Motherboard based PC with Red Hat 9 on a 6.4GB IDE hard drive. The wireless card used is a Netgear MA311  PCI card for a desktop system. A Proxim mini PCI card and PCI adapter card using a Texas Instruments 1410 chipset was not successful for this task.


Index

  1. Install Red Hat 9.0 (2.4.20-8)
  2. Download Required Files
  3. Install HostAP
  4. Install Time-HiRes  (Required)
  5. Install FakeAP
  6. Install HostAP Utilities
  7. Running FakeAP  
  8. To-Do
  9. Change Log
  10. Questions/Comments/Concerns
  11. Credits


Install Red Hat 9.0 Linux

  1. Package Group Selection (Add the following)

1.      SQL Database Server - Add "mysql-server" (Click on Details)

2.      Development Tools

3.      Kernel Development

4.      X Software Development

5.      Gnome Software Development

6.      Select System Tools, but remove "ethereal" 

   

When Red Hat 9 (2.4.20-8) boots up and after you log in you will find that the Netgear MA311 is not functioning and was not installed during the installation.  This sole purpose of this guide is to get FakeAP working. The Netgear MA311 was selected as a desktop PCI card was needed.


Download Required Files

Several files will be required to complete the installation process. Download the following files into the specified directories:

  1. HostAP
    1. hostap-driver-0.1.3.tar.gz
    2. http://hostap.epitest.fi/
    3. Download to /root/
  2. Time-HiRes
    1. Time-HiRes-1.55.tar.gz
    2. http://search.cpan.org/dist/Time-HiRes/
    3. Download to /root/
  3. FakeAP
    1. fakeap-0.3.1.tar.gz
    2. http://www.blackalchemy.to/project/fakeap/
    3. Download to /root/

Login with your username and password.

Start a terminal window.

            Red Hat Icon -> System Tools -> Terminal


Install HostAP Drivers (Required)

HostAP   This is a Linux driver for wireless LAN cards based on Intersil's Prism2/2.5/3 chipset. The driver supports a so called Host AP mode.

Copy the source Kernel to linux-2.4 directory. Since I have a Pentium 4. I am running a i686 Kernel. To see what kernel your system is running check /usr/src/linux-2.4.20-8/configs/

# cp /usr/src/linux-2.4/configs/kernel-2.4.20-i686.config /usr/src/linux-2.4/.config

# cd or cd /root

# tar –zxf hostap-driver-0.1.3.tar.gz

# cd /root/hostap-driver-0.1.3

# make pci KERNEL_PATH=/usr/src/linux-2.4

# make install_pci KERNEL_PATH=/usr/src/linux-2.4

Load the hostap PCI driver.

# modprobe hostap_pci (this loads the driver)

To check if the driver loaded:

# iwpriv wlan0

 

wlan0 Available private ioctl :

 

monitor          (8BE4) : set  1 int   & get  0                       
readmif          (8BE3) : set  1 byte  & get  1 byte
writemif         (8BE2) : set  2 byte  & get  0
reset            (8BE6) : set  1 int   & get  0
inquire          (8BE8) : set  1 int   & get  0
set_rid_word     (8BE5) : set  2 int   & get  0
mcccmd           (8BF0) : set  1 int   & get  0
wds_add          (8BEA) : set  1 addr  & get  0
wds_del          (8BEC) : set  1 addr  & get  0

addmac           (8BF2) : set  1 addr  & get  0

delmac           (8BF4) : set  1 addr  & get  0
kickmak          (8BF6) : set  1 addr  & get  0
prism2_param     (8BE0) : set  2 int   & get  0
getprism2_param  (8BE1) : set  1 int   & get  1 int
ptype            (0001) : set  1 int   & get  0
gettype          (0001) : set  0       & get  1 int
txratctrl        (0002) : set  1 int   & get  0

gettxratctrl     (0002) : set  0       & get  1 int

beacon_int       (0003) : set  1 int   & get  0
getbeacon_int    (0003) : set  0       & get  1 int
pseudo_ibss      (0004) : set  1 int   & get  0

getpseudo_int    (0004) : set  0       & get  1 int

alc              (0005) : set  1 int   & get  0
getalc           (0005) : set  0       & get  1 int
txpower          (0006) : set  1 int   & get  0

gettxpower       (0006) : set  0       & get  1 int

dump             (0007) : set  1 int   & get  0
getdump          (0007) : set  0       & get  1 int
other_ap_policy  (0008) : set  1 int   & get  0

getother_ap_pol  (0008) : set  0       & get  1 int

max_inactivity   (0009) : set  1 int   & get  0
getmax_inactivi  (0009) : set  0       & get  1 int
bridge_packets   (000A) : set  1 int   & get  0

getbridge_packe  (000A) : set  0       & get  1 int

dtim_period      (000B) : set  1 int   & get  0
getdtim_period   (000B) : set  0       & get  1 int
nullfunc_ack     (000C) : set  1 int   & get  0

getnullfunc_ack  (000C) : set  0       & get  1 int

max_wds          (000D) : set  1 int   & get  0
getmax_wds       (000D) : set  0       & get  1 int
autom_ap_algs    (000E) : set  1 int   & get  0

getautom_ap_algs (000E) : set  0       & get  1 int

ap_auth_algs     (000F) : set  1 int   & get  0
getap_auth_algs  (000F) : set  0       & get  1 int
allow_fcserr     (0010) : set  1 int   & get  0

getallow_fcserr  (0010) : set  0       & get  1 int

host_encrypt     (0011) : set  1 int   & get  0
gethost_encrypt  (0011) : set  0       & get  1 int
host_decrypt     (0012) : set  1 int   & get  0

gethost_decrypt  (0012) : set  0       & get  1 int

busmaster_rx     (0013) : set  1 int   & get  0
getbusmaster_rx  (0013) : set  0       & get  1 int
busmaster_tx     (0014) : set  1 int   & get  0

getbusmaster_tx  (0014) : set  0       & get  1 int

host_roaming     (0015) : set  1 int   & get  0
gethost_roming   (0015) : set  0       & get  1 int
bcrx_sta_key     (0016) : set  1 int   & get  0

getbcrx_sta_key  (0016) : set  0       & get  1 int

ieee_802_1x      (0017) : set  1 int   & get  0
getieee_802_1x   (0017) : set  0       & get  1 int
antsel_tx        (0018) : set  1 int   & get  0

getantsel_tx     (0018) : set  0       & get  1 int

antsel_rx        (0019) : set  1 int   & get  0
getantsel_rx     (0019) : set  0       & get  1 int
monitor_type     (001A) : set  1 int   & get  0

getmonitor_type  (001A) : set  0       & get  1 int

wds_type         (001B) : set  1 int   & get  0
getwds_type      (001B) : set  0       & get  1 int
hostscan         (001C) : set  1 int   & get  0

gethostscan      (001C) : set  0       & get  1 int

ap_scan          (001D) : set  1 int   & get  0
getap_scan       (001D) : set  0       & get  1 int
enh_sec          (001E) : set  1 int   & get  0

getenh_sec       (001E) : set  0       & get  1 int

basic_rates      (0020) : set  1 int   & get  0
getbasic_rates   (0020) : set  0       & get  1 int
oper_rates       (0021) : set  1 int   & get  0

getoper_rates    (0021) : set  0       & get  1 int

hostapd          (0022) : set  1 int   & get  0
gethostapd       (0022) : set  0       & get  1 int

 

Time-HiRes

 Time::HiRes module: High resolution time, sleep, and alarm.

Download Time-Hires to /root and expand

# LC_ALL=C; export LC_ALL

# cd /root
# tar –zxf Time-Hires-1.55.tar.gz
# cd /root/Time-HiRes-1.55

Install Time-HiRes

# perl Makefile.PL  (case sensitive)
# make
# make test

# make install

 

Install FakeAP

Fake AP generates thousands of counterfeit 802.11b access points.

The installation of FakeAP is as follows:

# cd /root
# tar –xzf fakeap-0.3.1.tar.gz

# cd /root/fakeap-0.3.1

 

To run FakeAP

 

# perl fakeap.pl –-interface wlan0 (this will run with default settings)

 

# perl fakeap.pl (this will display a menu of switches find out more from the ReadMe file.)

 

If you want to use WEP then you have to copy hostap_crypt_conf file from the HostAp utilities.


Install HostAP-Utilities

The Hostap-Utils  provides a set of interfaces for accessibility.  

The installation of HostAp Utilities is as follows:

# cd /root
# tar –xzf hostap-utils-0.1.3.tar.gz
# cd /root/hostap-utils-0.1.3

Copy the hostap_crypt_conf file to desired location.

# cp /root/hostap-utils-0.1.3/hostap_crypt_conf /usr/local/bin/


Change Log

02/18/2004  - Modify Red Hat 8.0+ Kismet HOWTO to create this Red hat 9.0 + FakeAP HOWTO

02/19/2004  - Test FakeAp HowTo steps using fresh install of Red Hat 9

 

Questions/Concerns/Comments

WARNING ! ! Use this HowTo at your own risk. No liability expressed or implied.  It may even blow up your computer! My Email address is : [email protected].

Hosted by www.Geocities.ws

1