problem with rtl8187se recon

[confussed]

im booting bt5 r2 frm usb in my toshiba protege T110 laptop. it use to be working all well
until recently i tried using metaspoilt & run an update on it. now it doesnt scan the wireless
network like it used to be, behaving unusual. However, when i ran the bt5 usb on different laptop,it works fine. so the problem is not the usb live distro for sure.
here is few command that i ran to chk, pls go thru the info & try figure out what is wrong with my wireless card or setting in bt5 was changed.

i hv tried ifconfig wlan0 up, iwconfig wlan0 start, /etc/init.d/wicd start, /etc/init.d/networking start & few more that I can find frm some forum but doesn't solve the issue.
Below are the respond I got:-

ifconfig

wlan0 Link encap:UNSPEC HWaddr 00-26-B6-32-34-01-30-30-00-00-00-00-00-00-00-00
UP BROADCAST NOTRAILERS RUNNING PROMISC ALLMULTI MTU:1500 Metric:1
RX packets:293 errors:2 dropped:0 overruns:0 frame:0
TX packets:428 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:34695 (34.6 KB) TX bytes:17976 (17.9 KB)
Interrupt:17 Memory:f87f0000-f87f0100


iwconfig

wlan0 802.11b/g Mode:Monitor Frequency=2.447 GHz Bit Rate=11 Mb/s
Retryn RTS thrff Fragment thrff
Power Managementff
Link Quality=0/100 Signal level=0 dBm Noise level=0 dBm
Rx invalid nwid:0 Rx invalid crypt:0 Rx invalid frag:0
Tx excessive retries:0 Invalid misc:0 Missed beacon:0

airodump-ng start wlan0

CH 4 ][ BAT: 1 hour 56 mins ][ Elapsed: 4 mins ][ 2012-11-21 01:24

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID


BSSID STATION PWR Rate Lost Frames Probe

Only when i activate Wicd Network Manager then it start scanning & displaying wireless network? However, notice the PWR column doesn't show any indication which usually does!!!
This scan only last for less than 3 minutes then all wireless gone missing again. As if the wireless card wasn't scanning at all.
CH 6 ][ BAT: 1 hour 55 mins ][ Elapsed: 24 s ][ 2012-11-21 01:17

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID

00:25:3C:BB:9B:79 0 6 2 0 6 54 . WPA2 CCMP PSK 2WIRE663
00:25:3C:77:C6:51 0 4 2 0 10 54 . WPA2 CCMP PSK MAZEHOME

BSSID STATION PWR Rate Lost Frames Probe

00:25:3C:BB:9B:79 20:64:32:21:EE:46 0 0 - 0 0 2
00:25:3C:77:C6:51 00:1F:1F:4B:36:5A -1 0 - 0 0 1
00:25:3C:77:C6:51 5C:0A:5B:13:63:E1 -1 0 - 0 0 1

Below is the dmesg output:



19.445152] r8187se: module is from the staging directory, the quality is unknown, you have been warned.
[ 19.518227] Linux video capture interface: v2.00
[ 19.543254] ieee80211_crypt: registered algorithm 'NULL'
[ 19.543260] ieee80211_crypt: registered algorithm 'TKIP'
[ 19.543263] ieee80211_crypt: registered algorithm 'CCMP'
[ 19.543266] ieee80211_crypt: registered algorithm 'WEP'
[ 19.543268]
[ 19.543270] Linux kernel driver for RTL8180 / RTL8185 based WLAN cards
[ 19.543272] Copyright (c) 2004-2005, Andrea Merello
[ 19.543275] r8180: Initializing module
[ 19.543278] r8180: Wireless extensions version 22
[ 19.543280] r8180: Initializing proc filesystem
[ 19.543317] r8180: Configuring chip resources
[ 19.543330] r8180 0000:08:00.0: enabling device (0000 -> 0003)
[ 19.543343] r8180 0000:08:00.0: PCI INT A -> GSI 17 (level, low) -> IRQ 17
[ 19.543355] r8180 0000:08:00.0: setting latency timer to 64
[ 19.580466] rtl8180_init:Error channel plan! Set to default.
[ 19.580471] r8180: Channel plan is 0
[ 19.580473]
[ 19.580475] Dot11d_Init()
[ 19.580479] r8180: MAC controller is a RTL8187SE b/g
[ 19.582635] r8180: usValue is 0x104
[ 19.582637]
[ 19.625808] r8180: EEPROM version 104
[ 19.630130] r8180: WW:**PLEASE** REPORT SUCCESSFUL/UNSUCCESSFUL TO Realtek!
[ 19.678531] r8180: IRQ 17
[ 19.679600] Registered led device: toshiba::illumination
[ 19.687387] r8180: Driver probe completed
[ 19.687389]


at this point im connected to my own wireless network

[ 112.208530] r8180: Bringing up iface
[ 112.407016] r8180: Card successfully reset
[ 113.146584] r8180: WIRELESS_MODE_G
[ 113.146586]
[ 113.164079] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 113.244323] atl1c 0000:07:00.0: irq 45 for MSI/MSI-X
[ 113.304687] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 113.384898] r8180: Bringing up iface
[ 113.583383] r8180: Card successfully reset
[ 114.322926] r8180: WIRELESS_MODE_G
[ 114.322928]
[ 114.355519] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 116.579096] Linking with 2WIRE663: channel is 6
[ 116.624011] Linking with 2WIRE663: channel is 6
[ 116.664704] Linking with 2WIRE663: channel is 6
[ 116.682293] Associated successfully
[ 116.682298] Using G rates
[ 116.696527] ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 119.739117] Associated successfully
[ 119.739122] Using G rates
[ 122.796149] Associated successfully
[ 122.796155] Using G rates
[ 125.859603] Associated successfully
[ 125.859608] Using G rates
[ 126.768075] wlan0: no IPv6 routers present
[ 128.918212] Associated successfully
[ 128.918217] Using G rates
[ 131.977071] Associated successfully
[ 131.977077] Using G rates
[ 135.034097] Associated successfully
[ 135.034102] Using G rates
[ 138.083447] Associated successfully
[ 138.083453] Using G rates
[ 141.137171] Associated successfully
[ 141.137176] Using G rates
[ 144.201680] Associated successfully
[ 144.201686] Using G rates
[ 147.246437] Associated successfully
[ 147.246443] Using G rates
[ 150.295484] Associated successfully
[ 150.295490] Using G rates
[ 152.005151] r8180: Bringing up iface
[ 152.203636] r8180: Card successfully reset
[ 152.943144] r8180: WIRELESS_MODE_G
[ 152.943146]
[ 152.980658] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 153.136860] atl1c 0000:07:00.0: irq 45 for MSI/MSI-X
[ 153.196648] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 217.861644] r8180: Bringing up iface
[ 218.060133] r8180: Card successfully reset
[ 218.799783] r8180: WIRELESS_MODE_G
[ 218.799784]
[ 218.830985] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 218.871183] r8180: Bringing up iface
[ 219.069676] r8180: Card successfully reset
[ 219.809369] r8180: WIRELESS_MODE_G
[ 219.809371]
[ 219.826345] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 219.895633] atl1c 0000:07:00.0: irq 45 for MSI/MSI-X
[ 219.952676] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 220.060704] r8180: Bringing up iface
[ 220.259215] r8180: Card successfully reset
[ 220.998865] r8180: WIRELESS_MODE_G
[ 220.998867]
[ 221.029617] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 223.206673] Linking with 2WIRE663: channel is 6
[ 223.247514] Linking with 2WIRE663: channel is 6
[ 223.265837] Associated successfully
[ 223.265842] Using G rates
[ 223.281592] ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 223.308765] Linking with 2WIRE663: channel is 6
[ 223.327004] Associated successfully
[ 223.327008] Using G rates
[ 233.712096] wlan0: no IPv6 routers present
[ 1391.071176] r8180: Bringing up iface
[ 1391.269696] r8180: Card successfully reset
[ 1392.009249] r8180: WIRELESS_MODE_G
[ 1392.009251]
[ 1392.039899] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 1392.199317] atl1c 0000:07:00.0: irq 45 for MSI/MSI-X
[ 1392.256653] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 1392.432906] r8180: Bringing up iface
[ 1392.631391] r8180: Card successfully reset
[ 1393.370904] r8180: WIRELESS_MODE_G
[ 1393.370906]
[ 1393.403993] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 1393.506593] r8180: Bringing up iface
[ 1393.705080] r8180: Card successfully reset
[ 1394.444589] r8180: WIRELESS_MODE_G
[ 1394.444591]
[ 1394.466302] ADDRCONF(NETDEV_UP): wlan0: link is not ready
[ 1394.563660] atl1c 0000:07:00.0: irq 45 for MSI/MSI-X
[ 1394.620782] ADDRCONF(NETDEV_UP): eth0: link is not ready
[ 1396.352173] PM: Syncing filesystems ... done.
[ 1396.352199] Freezing user space processes ... (elapsed 0.01 seconds) done.
[ 1396.368048] Freezing remaining freezable tasks ... (elapsed 0.01 seconds)




can some expert in linux here help to solve my issue. appreciate your great HELP.

[charonsecurity]

I'd like to ask for some clarification if its okay. You are having issues within metasploit if I understand correctly? This happened after you did an update to metasploit. From the looks of it your wifi card is responding normally. Also you are running BackTrack R2, not R3?
May I suggest updating to R3? As for metasploit did you update using git or msfupdate? Sorry I haven't been much help yet.

[maverik35]

I do not see any relation between metasploit and wifi drivers, unless some dependencies had been broken, in which case, you might need to reinstall driver...

Please post: lspci -v

Look for your wifi card and see the driver loaded.

You can try removing the module and reload it manually: modprobe -r r8180 and then load it again: modprobe r8180

Check the status of you interface with rfkill command: rfkill list
and see if both hardware and software are unblocked.

[confussed]

i had tried yr suggestion & still to no avail, below is the result.

note: i can use wicd to connect to my wifi & surf flawlessly uninterupted. only i could not use airodump-ng as intended or any wifi recon methods as it can scan for 2mins & lost everything after that. thus unable to capture enough ivs at all.

below is the results:-

root@bt:~# rfkill list
0: hci0: Bluetooth
Soft blocked: no
Hard blocked: no


root@bt:~# lspci -v
00:00.0 Host bridge: Intel Corporation Mobile 4 Series Chipset Memory Controller Hub (rev 07)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, fast devsel, latency 0
Capabilities: [e0] Vendor Specific Information <?>
Kernel driver in use: agpgart-intel

00:02.0 VGA compatible controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
Subsystem: Toshiba America Info Systems Device ffe1
Flags: bus master, fast devsel, latency 0, IRQ 46
Memory at f0000000 (64-bit, non-prefetchable) [size=4M]
Memory at d0000000 (64-bit, prefetchable) [size=256M]
I/O ports at 1800 [size=8]
Capabilities: [90] Message Signalled Interrupts: Mask- 64bit- Queue=0/0 Enable+
Capabilities: [d0] Power Management version 3

00:02.1 Display controller: Intel Corporation Mobile 4 Series Chipset Integrated Graphics Controller (rev 07)
Subsystem: Toshiba America Info Systems Device ffe1
Flags: bus master, fast devsel, latency 0
Memory at f0400000 (64-bit, non-prefetchable) [size=1M]
Capabilities: [d0] Power Management version 3

00:1a.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #4 (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 16
I/O ports at 1820 [size=32]
Capabilities: [50] PCIe advanced features <?>
Kernel driver in use: uhci_hcd

00:1a.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #5 (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 21
I/O ports at 1840 [size=32]
Capabilities: [50] PCIe advanced features <?>
Kernel driver in use: uhci_hcd

00:1a.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #6 (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 19
I/O ports at 1860 [size=32]
Capabilities: [50] PCIe advanced features <?>
Kernel driver in use: uhci_hcd

00:1a.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #2 (rev 03) (prog-if 20)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 19
Memory at f0904800 (32-bit, non-prefetchable) [size=1K]
Capabilities: [50] Power Management version 2
Capabilities: [58] Debug port: BAR=1 offset=00a0
Capabilities: [98] PCIe advanced features <?>
Kernel driver in use: ehci_hcd

00:1b.0 Audio device: Intel Corporation 82801I (ICH9 Family) HD Audio Controller (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, fast devsel, latency 0, IRQ 44
Memory at f0700000 (64-bit, non-prefetchable) [size=16K]
Capabilities: [50] Power Management version 2
Capabilities: [60] Message Signalled Interrupts: Mask- 64bit+ Queue=0/0 Enable+
Capabilities: [70] Express Root Complex Integrated Endpoint, MSI 00
Capabilities: [100] Virtual Channel <?>
Capabilities: [130] Root Complex Link <?>
Kernel driver in use: snd_hda_intel
Kernel modules: snd-hda-intel

00:1c.0 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 1 (rev 03)
Flags: bus master, fast devsel, latency 0
Bus: primary=00, secondary=02, subordinate=02, sec-latency=0
I/O behind bridge: 00004000-00004fff
Memory behind bridge: 80b00000-80cfffff
Prefetchable memory behind bridge: 0000000080d00000-0000000080efffff
Capabilities: [40] Express Root Port (Slot+), MSI 00
Capabilities: [80] Message Signalled Interrupts: Mask- 64bit- Queue=0/0 Enable+
Capabilities: [90] Subsystem: Toshiba America Info Systems Device ffe0
Capabilities: [a0] Power Management version 2
Capabilities: [100] Virtual Channel <?>
Capabilities: [180] Root Complex Link <?>
Kernel driver in use: pcieport
Kernel modules: shpchp

00:1c.4 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 5 (rev 03)
Flags: bus master, fast devsel, latency 0
Bus: primary=00, secondary=07, subordinate=07, sec-latency=0
I/O behind bridge: 00002000-00002fff
Memory behind bridge: 80800000-80afffff
Prefetchable memory behind bridge: 0000000080000000-00000000801fffff
Capabilities: [40] Express Root Port (Slot+), MSI 00
Capabilities: [80] Message Signalled Interrupts: Mask- 64bit- Queue=0/0 Enable+
Capabilities: [90] Subsystem: Toshiba America Info Systems Device ffe0
Capabilities: [a0] Power Management version 2
Capabilities: [100] Virtual Channel <?>
Capabilities: [180] Root Complex Link <?>
Kernel driver in use: pcieport
Kernel modules: shpchp

00:1c.5 PCI bridge: Intel Corporation 82801I (ICH9 Family) PCI Express Port 6 (rev 03)
Flags: bus master, fast devsel, latency 0
Bus: primary=00, secondary=08, subordinate=08, sec-latency=0
I/O behind bridge: 00003000-00003fff
Memory behind bridge: 80300000-805fffff
Prefetchable memory behind bridge: 0000000080600000-00000000807fffff
Capabilities: [40] Express Root Port (Slot+), MSI 00
Capabilities: [80] Message Signalled Interrupts: Mask- 64bit- Queue=0/0 Enable+
Capabilities: [90] Subsystem: Toshiba America Info Systems Device ffe0
Capabilities: [a0] Power Management version 2
Capabilities: [100] Virtual Channel <?>
Capabilities: [180] Root Complex Link <?>
Kernel driver in use: pcieport
Kernel modules: shpchp

00:1d.0 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #1 (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 23
I/O ports at 1880 [size=32]
Capabilities: [50] PCIe advanced features <?>
Kernel driver in use: uhci_hcd

00:1d.1 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #2 (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 19
I/O ports at 18a0 [size=32]
Capabilities: [50] PCIe advanced features <?>
Kernel driver in use: uhci_hcd

00:1d.2 USB Controller: Intel Corporation 82801I (ICH9 Family) USB UHCI Controller #3 (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 18
I/O ports at 18c0 [size=32]
Capabilities: [50] PCIe advanced features <?>
Kernel driver in use: uhci_hcd

00:1d.7 USB Controller: Intel Corporation 82801I (ICH9 Family) USB2 EHCI Controller #1 (rev 03) (prog-if 20)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0, IRQ 23
Memory at f0904c00 (32-bit, non-prefetchable) [size=1K]
Capabilities: [50] Power Management version 2
Capabilities: [58] Debug port: BAR=1 offset=00a0
Capabilities: [98] PCIe advanced features <?>
Kernel driver in use: ehci_hcd

[confussed]

part2

00:1e.0 PCI bridge: Intel Corporation 82801 Mobile PCI Bridge (rev 93) (prog-if 01)
Flags: bus master, fast devsel, latency 0
Bus: primary=00, secondary=0a, subordinate=0a, sec-latency=0
Capabilities: [50] Subsystem: Toshiba America Info Systems Device ffe0

00:1f.0 ISA bridge: Intel Corporation ICH9M-E LPC Interface Controller (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, medium devsel, latency 0
Capabilities: [e0] Vendor Specific Information <?>
Kernel modules: iTCO_wdt

00:1f.2 SATA controller: Intel Corporation ICH9M/M-E SATA AHCI Controller (rev 03) (prog-if 01)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, 66MHz, medium devsel, latency 0, IRQ 43
I/O ports at 1818 [size=8]
I/O ports at 180c [size=4]
I/O ports at 1810 [size=8]
I/O ports at 1808 [size=4]
I/O ports at 18e0 [size=32]
Memory at f0904000 (32-bit, non-prefetchable) [size=2K]
Capabilities: [80] Message Signalled Interrupts: Mask- 64bit- Queue=0/4 Enable+
Capabilities: [70] Power Management version 3
Capabilities: [a8] SATA HBA <?>
Capabilities: [b0] PCIe advanced features <?>
Kernel driver in use: ahci

00:1f.3 SMBus: Intel Corporation 82801I (ICH9 Family) SMBus Controller (rev 03)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: medium devsel, IRQ 10
Memory at 80200000 (64-bit, non-prefetchable) [size=256]
I/O ports at 1c00 [size=32]
Kernel modules: i2c-i801

07:00.0 Ethernet controller: Atheros Communications AR8132 Fast Ethernet (rev c0)
Subsystem: Toshiba America Info Systems Device ffe0
Flags: bus master, fast devsel, latency 0, IRQ 45
Memory at 80800000 (64-bit, non-prefetchable) [size=256K]
I/O ports at 2000 [size=128]
Capabilities: [40] Power Management version 3
Capabilities: [48] Message Signalled Interrupts: Mask- 64bit+ Queue=0/0 Enable+
Capabilities: [58] Express Endpoint, MSI 00
Capabilities: [6c] Vital Product Data <?>
Capabilities: [100] Advanced Error Reporting <?>
Capabilities: [180] Device Serial Number ff-9e-26-00-26-e4-4e-ff
Kernel driver in use: atl1c
Kernel modules: atl1c

08:00.0 Network controller: Realtek Semiconductor Co., Ltd. RTL8187SE Wireless LAN Controller (rev 22)
Subsystem: Realtek Semiconductor Co., Ltd. Device 8182
Flags: bus master, fast devsel, latency 0, IRQ 17
I/O ports at 3000 [size=256]
Memory at 80300000 (32-bit, non-prefetchable) [size=16K]
Capabilities: [40] Power Management version 3
Capabilities: [50] Message Signalled Interrupts: Mask- 64bit+ Queue=0/0 Enable-
Capabilities: [70] Express Legacy Endpoint, MSI 00
Capabilities: [100] Advanced Error Reporting <?>
Capabilities: [140] Virtual Channel <?>
Capabilities: [160] Device Serial Number 00-26-b6-32-34-01-00-00
Kernel driver in use: r8180
Kernel modules: r8187se

could the driver be the problem as it is not for r8187se? pls kindly advice any solution. thank you in advance. im almost giving up.

[confussed]

I do not see any relation between metasploit and wifi drivers, unless some dependencies had been broken, in which case, you might need to reinstall driver...

Please post: lspci -v

Look for your wifi card and see the driver loaded.

You can try removing the module and reload it manually: modprobe -r r8180 and then load it again: modprobe r8180

Check the status of you interface with rfkill command: rfkill list
and see if both hardware and software are unblocked.

below is the modprobe results:-

root@bt:~# modprobe -r r8180
FATAL: Module r8180 not found.

root@bt:~#
root@bt:~# modprobe -r r8187se
root@bt:~# modprobe r8187se
(command executed)

root@bt:~# airmon-ng


Interface Chipset Driver

wlan0 RTL8180/RTL8185 r8180



root@bt:~# airodump-ng wlan0

CH 12 ][ BAT: 2 hours 14 mins ][ Elapsed: 5mins ][ 2013-03-10 11:04

BSSID PWR Beacons #Data, #/s CH MB ENC CIPHER AUTH ESSID


BSSID STATION PWR Rate Lost Frames Probe


no luck still, could it be the drive issues?