Wireless Security
Proxim QuickBridge Traffic Dec 09 2010 06:04PM
jmk (jmk foofus net) (1 replies)
Re: Proxim QuickBridge Traffic Dec 11 2010 03:18AM
Joshua Wright (jwright hasborg com)
On 12/9/2010 1:04 PM, jmk wrote:
> I'm examining a couple of Proxim QuickBridge links and found that while
> Kismet detects them, no traffic for is visible in the pcap. After a bit
> of reading, it appears that this traffic may be encapsulated in some
> non-standard manner and needs to be extracted from the pcap. I've seen
> mention of a qbextract (http://802.11ninja.net/code/qbextract.tgz) tool,
> but the link isn't valid and I'm unable to find it anywhere else. I'm
> wondering if anyone has this and would be willing to share. ;)

You can grab qbextract from
http://www.willhackforsushi.com/code/qbextract.tgz. It reads from an
802.11 packet capture and searched for the 802.2 type for QuickBridge
encapsulated data packets, rewriting them with a standard IP 802.2
header to an output packet capture.

QuickBridge systems can operating at a variety of different frequencies,
though some operate at 2.4 GHz using 802.11-style modulation and framing
(this is where qbextract can be useful). Search for the string
"OR_WORP" in the packet capture; if present, you can use qbextract to
extract out the IP packets.

-Josh

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus