SigSpy

Category:Sasecurity
back to http://scratchpad.wikia.com/wiki/Sasecurity
TableOfContents
=== Sigspy results ===
I having problems with 
one of my devices. Most MeshAP being either Via board or Compaq have gone up with relative 
ease and did not required performance tuning other than boosting the 
power of the radio card; however, I have one device that seems to have 
very poor performance. When I install a MeshAP it is either a PC using LMR-400 and a 8 dbi 
antenna or a Out Door Unit (ODU)using a VIA board and a pigtail and 8 dbi 
antenna. The device I having problem with is a Compaq that is showing 
a 1 Mbps connection speed. In my lab it shows 11 Mbps. After installation I plug the unit in and turn it on. Basically walk away. Then I go to Wiana to verify that it is connected. 100% of the time it 
indicates that it has connected. I then ensure that all the Wiana setting such as Antenna etc are set 
correctly. After that I ssh into the box and run the following commands
 * "reporter"
 * "sigspy"
I know also add the following command:
 * For Radio Cards that are 200 mW: "ifconfig wlan0 txpower 200mw"
 * For Radio Cards that are 50 mW: "ifconfig wlan0 txpower 50mw"
 * I than check Wiana after about 15 minutes to see reporting in Wiana.
I have noticed that that I am getting a lot of Radio Reflection from my 
other MeshAP's that are not in direct line of site. They have a 
physical barrier - FarradayCage - between the two radio cards that are reflecting and a direct 
line of site to the uplink node. What is happening is that message 
indicates it has found a new gateway. It then bounces back and forth 
between different routes to the gateway.
My solution was to increase the power in the card and to add another 
MeshAP to give it a solid link to the gateway. This provide a good 
solution for about 12 hours and now it has reverted back to looking for new 
gateways.
I don't want to lock it to a single gateway as my intension is to put 
many gateways up.
I tried to "blocknode" the two problem MeshAP that are reflecting 
however this command did not do anything
Sorry for the long winded build up but the question is there an 
alternative to stop receiving reflect RF from a known Meshap?
 
Strange, because the 3rd one (which is now '00:xx:xx : 
Quality:232/92
Signal level:-34 dBm Noise level:-38 dB
m (updated)') is another node across the road. According to 
Wiana I have a
95% signal between the two.
I'm getting pretty fed up there is no "idiots guide" to understand 
the very basics of the information provided that you expect to run a cutting 
edge business off.
How about a "This is the commands you can use .. 
Getandverify , Factoryreset .. Etc" on the wiki. 
I have altered some senstivity settings, and gone from clean to noisy
and vice versa. But I really don't know what that really means.
General rule of thumb, look for 9db separation. The value does 
not matter, only the difference between the two. 
So on your example - level:-25 dBm Noise level:-38 dB - good 
signal - the rest I would regard as unworkable. Just wondering whether I'm getting good signals. Can anyone give a definitive description on what the figures mean? I've searched my 
past emails and can't find this info, same with the wiki.
A past question by David Crane wasn't answered as far as I can see 
wlan0 Statistics collected: 00:02:6F:09:A4:0B : Quality:7/92 Signal level:-20 dBm Noise 
level:-37dBm
=== Issues ===
I'd guess you have something running in peer-to-peer mode in the vicinity of the meshAP. I've seen the all-4's mac in netstumbler under those conditions.
 
 Infrastructure
 This is the only node that is doing this, and it has only just started doing it.
 Are you in adhoc mode or infrastructure?
 Does anyone know what this is:
 
 44:44:44:44:44:44 : Quality:0/92 Signal level:-100 dBm Noise level:-100 dBm
 00:09:5B:91:A5:76 : Quality:0/92 Signal level:-100 dBm Noise level:-100 dBm
 
 00:09:5B:91:A5:76 is its own MAC address, all the nodes are showing fine, just this in the middle.
 
=== adfasf ===
SshMesh into the box and try the following.
 
SigSpy
 
 * watch iwspy wlan2 <- this is what sigspy is
 * watch iwspy wlan1
files with interesting info include
 * cat /var/tmp/work/scano
 * cat /var/tmp/work/scanap
 * cat /var/tmp/work/topo
 
One more question and I am starting my weekend. I was just doing my Friday check, looking through WiaNa and something struck me. In the window that shows all your neighbors for a node, it gives you all kind of useful information " ssid, address, channel, mode, SIGNAL, and rates" Now wiana is getting this information from my system and I am wondering how I can get this info at the command line. I would love to see signal is -55 between to nodes at the command line. I can use sigspy but some times my gateway has to many MAC address to display them all and I need another way to check connections. The wiana neighbors windows also tells me what hardware and MAC my neighbors are running, how did it get that info???? Just to sum it all up how is wiana getting all this info and can I get it at the command line?
=== Sigspy reports one thing, Meshbox another ===
http://www.meshworks.ws I’ve seen this before where there has been some RF from elsewhere causing difficulties.
 * Recheck your channel/frequency settings in Reporter by looking at the frequencies.
 * Try iwlist wlan0 scan to give you a bit more information.
 * Take out a laptop with netstumbler and see if there is any other wifi about.
 * Change channels and see if the problem goes away.
 . ct: [MeshAPuser] FW: [MeshAPuser] sigspy reports one thing MeshBox does another
Here I go again replying to my own message: Another repeater has lost connectivity, sipspy show the following: 00:04:E2:80:6D:94 : Quality:249/92 Signal level:-28 dBm Noise level:-39 dBm (updated) I can't even ping the unit. Reporter indicates it doesn't mesh with the node it normally does. Broadunblock show the signal to be at 0 noise in the 30. Is someone playing with us?
 . Subject: [MeshAPuser] sigspy reports one thing MeshBox does another I hope I am reading this write but one of my MeshAP see a signal as below using sigspy: 00:02:6F:35:8F:63 : Quality:250/92 Signal level:-19 dBm Noise level:-30 dBm (updated) sometimes I can ping the node and most time I cannot. I try to do a broadunblock on both units but I still can't get them to mesh. Any ideas?
Category:Mesh sigspy