Hi,
im a Student in Germany currently working on a project concerning
wireless security.
For testing purposes we would like to send ACKs to packets, which
weren't adressed to us, or suppress sending normal ACKs.
I've looked through mac80211's code and found there much, what looks
like the ACK-sending-action is triggered in rx.c (we're checking CRC,
length, adressed to us, ...). But, one the other hand, tx.c states in a
comment
/* TODO: These control frames are not currently sent by
* mac80211, but should they be implemented, this function
* needs to be updated to support duration field calculation. *
[...]
* ACK: 0 if immediately previous directed data/mgmt had
* more=0, with more=1 duration in ACK frame is duration
* from previous frame minus time needed to transmit ACK
* and its SIFS
*/
Furthermore ath9k e.g. write parameters for configuring the sending of
ACKs directly into hw's memory... and doesn't do much more.
Thus I deduce ACK sending is completely done in hardware.
Is my conclusion and understanding right? Is there any possible solution
to my problem of sending ACKs manually? Would that be fast enough for
the SIFS and other stations' ACK timeout?
I would appreciate a short message to help me out.
Greetings from sunny Germany
Daniel Berger