IMPORTANT NOTE: This page is deprecated, updated documentation can be found here

At this point in time, this page is far from complete. In the interim, useful information will be included here. Also do a Forum Search for additional information.

The previous version of ipw2200 can't be compiled with the linux headers 2.6.20-16-generic (used by Ubuntu 7.04) so here is the way to get the rtap0 interface working.

• ieee80211-1.2.17.

Make sure that you have this library else ipw2200-1.2.1 drivers won't compile

wget http://superb-west.dl.sourceforge.net/sourceforge/ieee80211/ieee80211-1.2.17.tar.gz
tar zxvf ieee80211-1.2.17.tar.gz
cd ieee80211-1.2.17
sudo make
sudo make install

• Get the patch and the driver.

drivers patch link

wget http://superb-west.dl.sourceforge.net/sourceforge/ipw2200/ipw2200-1.2.1.tgz

• Patch the driver.

tar zxvf ipw2200-1.2.1.tgz
tar zxvf ipw2200-1.2.1-inject_patch.tar.gz
patch ipw2200-1.2.1/ipw2200.c ipw2200-1.2.1-inject.patch
patch ipw2200-1.2.1/Makefile ipw2200-1.2.1-inject_Makefile.patch
cd ipw2200-1.2.1
sudo ./remove-old
sudo make
sudo make install

• Turn on the module.

sudo rmmod ipw2200
sudo modprobe ipw2200 rtap_iface=1

At this stage if you see that your module can be loaded, you can load it at boot with the option “rtap_iface=1”. Just edit the file “/etc/modprobe.d/options” and add the line “options ipw2200 rtap_iface=1”

• Now you should be able to bring up the rtap0 interface and listen with airodump-ng.

sudo ifconfig eth1 up
sudo ifconfig rtap0 up
sudo airodump-ng rtap0 -c 11 --bssid 00:0f:e2:xx:xx:xx --ivs -w dump

See this thread.

For the code see:

• http://precompiled.de/~jamx/

If you want to channel hop, use the ethX interface where X is the interface that got created while loading the driver.

You get it by specifying rtap_iface=1 while loading the driver or by setting the appropriate value in /sys.

The rtapX interface allows packet capture while you are in managed mode.

Try adding the channel settings to the modprobe:

 modprobe ipw2200 rtap_iface=1 channel=X

Where X is the AP channel.

The ipw2200 driver does not support the transmission of management frames such as deauthentication.

• How I got ipw2200 packet injection working in Hardy
• Tutorial: How to crack wep using an ipw2200 based card.
• ipw2200-1.2.1-inject patch link.
• Link to patches.
• IPW2200 Injection (v2)
• Basic injection with ipw2200 and BackTrack v2 for beginners
• Tutorial: WEP Crack / No Clients / IPW2200 (Centrino)