Rtl8812au: Please add frequecy from 5340 to 5480

[Zanzaux]

is it possible to add frequency from 5340-5480?

[astsam]

Try this patch for v5.6.4.2.
0001-Add-missing-5GHz-channels.txt

[Zanzaux]

Try this patch for v5.6.4.2.
0001-Add-missing-5GHz-channels.txt

Hello Thanks for taking an interest in the speech, where and how do I apply this file?

[astsam]

1. Download the source code of the branch v5.6.4.2 (see section Notes).
2. Apply the patch
   patch -p1 < 0001-Add-missing-5GHz-channels.txt
3. Build and install the driver or use DKMS.

[Zanzaux]

1. Download the source code of the branch v5.6.4.2 (see section Notes).
2. Apply the patch
   patch -p1 < 0001-Add-missing-5GHz-channels.txt
3. Build and install the driver or use DKMS.

THANKS ENDLESS !!! finally everything works and I don't get the message "kernel reports: Channel is disabled" when I try to set the channel
Thanks again I hope the aircrack-ng team adds your default patch.
Thanks.

[Zanzaux]

Is it possible to enable other frequencies?

[astsam]

Technically this is possible, but the driver tunes some undocumented registers depending on RF band. Due to the lack of the documentation this modification may cause suboptimal performance in the extended frequency range.

[astsam]

I can try to enable 5075 to 5175 frequency range.

[astsam]

0002-Add-low-frequency-5GHz-band.txt
It will be great if you check the real RF output with a spectrum analyzer.

[Zanzaux]

Thanks astsam :), let's see if I can do some tests with the spectrum analyzer this weekend.
I noticed that when I set the channel under 5180 by typing iwconfig
I detect channel "0", which does not happen with the other channels , where the set channel is shown like 5180,5200,5500 etc ...

airodump-ng wlan1 -C 5100
iwconfig
wlan1 unassociated ESSID: "" Nickname: ""
Mode: Monitor Channel = 0 Access Point: Not-Associated

[astsam]

I used iw command to set and get channel. You are right, iwconfig has incorrect output.

$sudo iw wlx000f00371234 info
Interface wlx000f00371234
    ifindex 58
    wdev 0x3700000001
    addr 00:0f:00:37:12:34
    type monitor
    wiphy 55
    channel 15 (5075 MHz), width: 20 MHz, center1: 5075 MHz
    txpower 20.00 dBm

$ sudo iwconfig wlx000f00371234
wlx000f00371234  unassociated  ESSID:""  Nickname:"<WIFI@REALTEK>"
          Mode:Monitor  Channel=0  Access Point: Not-Associated   
          Sensitivity:0/0  
          Retry:off   RTS thr:off   Fragment thr:off
          Encryption key:off
          Power Management:off
          Link Quality=0/100  Signal level=0 dBm  Noise level=0 dBm
          Rx invalid nwid:0  Rx invalid crypt:0  Rx invalid frag:0
          Tx excessive retries:0  Invalid misc:0   Missed beacon:0

I supposed the iwconfig is deprecated and see no reason to fix this issue. Try to use the iw utility.

[Zanzaux]

Thanks astsam, I made some tests through "airodump-ng wlan1 -C ch" here are the values ​​I get by varying the frequencies from the AP

-1 5060

-45 5075

-41 5090

-44 5100
-34 5130
-34 5160
-34 5180

-33 5320
-33 5380
-33 5460
-33 5500

-43 5700

-39 5785

-42 5925
-42 5950
-42 5990
-42 6000

If you can add from 4920-5070 it would be the top !!!
Thank you so much for creating the driver and also the patches and most of all thanks for the incredible help and availability.

[astsam2]

I am happy that my patches help you.
Zanzaux, will you clarify the meaning of the first values

-45 5075
...

[astsam2]

If you can add from 4920-5070 it would be the top

It is not clear for me how to support this range. The drive internally uses channel number instead of frequency. Channels from 1 to 14 is reserved for 2,4GHz band. Moreover, due to this formula frequency less than 5000 MHz corresponds to negative channel value.

Freq = (Chan * 15) + 5000

Therefore, the lowest frequency that could be added is 5075 MHz (corresponding to channel 15).

[Zanzaux]

I am happy that my patches help you.
Zanzaux, will you clarify the meaning of the first values

-45 5075
...

If you refer to the first values ​​like 4920,4950 etc.. I had mentioned them if content be added in one of your amazing patches :)

[Zanzaux]

If you can add from 4920-5070 it would be the top

It is not clear for me how to support this range. The drive internally uses channel number instead of frequency. Channels from 1 to 14 is reserved for 2,4GHz band. Moreover, due to this formula frequency less than 5000 MHz corresponds to negative channel value.

Freq = (Chan * 15) + 5000

Therefore, the lowest frequency that could be added is 5075 MHz (corresponding to channel 15).

I understand, do not worry I'm sure that if you will find the right documentation you will have no problems enabling them :) you have really done a lot for me congratulations and thanks !!!

https://github.com/astsam2/rtl8812au

[astsam2]

If you refer to the first values ​​like 4920,4950,4970,4990,5010,5060 I had mentioned them if content be added in one of your amazing patches :)
I am afraid my patch is not ensure the exact equality the desired frequency and the real frequency in the band below channel 36. I cannot check this myself because I have not a proper measurement equipment.

[Zanzaux]

Hi astsam I will do an analysis with the spectrum analyzer

[Zanzaux]

Unfortunately I am having problems in creating an access point via linux under channel 36, if I insert the channels above 36 more I can create an access point, I have tried both with the linux manager and with hostapd-dnsmasq.
Do you have any solution?

[astsam2]

The driver has some checks in ap logic that I missed. Will you try this patch?
0001-Fix-error-creating-an-access-point-below-channel-36.txt

[astsam2]

To send frames you may use scapy and a script like this. It sends ProbeRequest frames via mon0 interface.

#!/usr/bin/env python3
from scapy.all import *
from scapy.layers.dot11 import *

def main():
    receiver_mac = 'ff:ff:ff:ff:ff:ff'
    # bssid = receiver_mac
    bssid = '03:bb:bb:bb:bb:bb'
    transmitter_mac = '00:22:12:34:56:78'
    ssid = '12345678'
    channel = chr(11)
    iface = 'mon0'
    frame_count = 1000

    frame = RadioTap() \
            / Dot11(type=0, subtype=4, addr1=receiver_mac, addr2=transmitter_mac, addr3=bssid) \
            / Dot11ProbeReq() \
            / Dot11Elt(ID='SSID', info=ssid) \
            / Dot11Elt(ID='Rates', info='\x82\x84\x8b\x96\x0c\x12\x18') \
            / Dot11Elt(ID='ESRates', info='\x30\x48\x60\x6c') \
            / Dot11Elt(ID='DSset', info=channel)
#    answer = srp1(frame, iface=iface)
#    wireshark(frame)

    # send frame_count frames
    # sendp(frame, iface=iface, inter=0.100, count=frame_count)

    # send frames indefinitely
    sendp(frame, iface=iface, inter=0.100, loop=1)

# Press the green button in the gutter to run the script.
if __name__ == '__main__':
    main()

[Zanzaux]

The driver has some checks in ap logic that I missed. Will you try this patch?
0001-Fix-error-creating-an-access-point-below-channel-36.txt

installing the patch and then the driver via dkms when restarting the network card was no longer present, i just downloaded your driver with the patch applied from your repository and now the access point under channel 36 works,

https://github.com/astsam2/rtl8812au

[Zanzaux]

Here is the measurement: under CH 36

CH 36 5180 -54
CH 32 5160 -56
CH 28 5140 -60
CH 24 5120 -58
CH 20 5100 -62
CH 18 5090 -63
Ch 17 5085 -61
CH 16 5080 -61
CH 15 5075 -61

[Zanzaux]

Hi astsam typing "iw list" I arrive at the frequency of 5885, but I noticed that I can actually test up to 6000 mhz, could you add the remaining 100 mhz?

[kaselix]

If you can add from 4920-5070 it would be the top

It is not clear for me how to support this range. The drive internally uses channel number instead of frequency. Channels from 1 to 14 is reserved for 2,4GHz band. Moreover, due to this formula frequency less than 5000 MHz corresponds to negative channel value.

Freq = (Chan * 15) + 5000

Therefore, the lowest frequency that could be added is 5075 MHz (corresponding to channel 15).

Hello congratulations for the incredible work, finally a driver with a reputable frequency list. I don't know if it can be useful but by scanning the channel for example 2327 I can "start" a deauth on an access point on the frequency of 4920, I don't know if the attack actually comes completed ...

Here is a list of the possible frequencies I have tested
4920 2327 4925 2332 4960 2367 4970 2377 4975 2382 4980 2387

I hope you will be able to increase the frequency range further.
Thanks.