Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

pcap files are broken at "_flipper_sd_serial" firmware #347

Closed
RekordNadoev opened this issue Oct 7, 2023 · 10 comments
Closed

pcap files are broken at "_flipper_sd_serial" firmware #347

RekordNadoev opened this issue Oct 7, 2023 · 10 comments

Comments

@RekordNadoev
Copy link

Hardware:
Flipper Zero dev-board (ESP32-S2) with *_flipper_sd_serial.bin firmware

Software:
Flipper Zero Marauder companion v0.6.2
Saving .pcap files to Flipper's SD-card.

Saved .pcap files are broken after "esp32_marauder_v0_10_8_20230621_flipper_sd_serial.bin" firmware.

Open with tcpdump v4.99.1: "tcpdump: unknown file format"
Open with wireshark v3.6.2: "The file "sniffpmkid_0.pcap" appears to be damaged or corrupt (commview: NCFX data negth 0 < 20)"
Open with aircrack-ng v1.7: "Unsupported file format (not a pcap or IVs file)."

Tried firmwares:
esp32_marauder_v0_10_8_20230621_flipper_sd_serial.bin - OK
esp32_marauder_v0_11_0_rc3_20230727_flipper_sd_serial.bin - .pcap is broken
esp32_marauder_v0_11_1_20230907_flipper_sd_serial.bin - .pcap is broken
esp32_marauder_v0_12_0_20230910_flipper_sd_serial.bin - .pcap is broken
esp32_marauder_v0_12_1_20231005_flipper_sd_serial.bin - .pcap is broken

To Reproduce
Steps to reproduce the behavior:

  1. Get Flipper Zero with dev-board + ESP32 Marauder firmware
  2. Run Apps => GPIO => [ESP32] WiFi Marauder
  3. Set "Save to flipper sdcard" to "Yes" for logs and pcaps
  4. Run Sniff => pmkid (or Sniff => raw) => get .pcap files saved to flipper's sdcard
  5. Copy .pcap files to PC and try to open with wireshark/tcpdump/aircrack-ng
  6. Get error messages. tcpdump: "tcpdump: unknown file format"; wireshark: "The file "sniffpmkid_0.pcap" appears to be damaged or corrupt (commview: NCFX data negth 0 < 20)"; aircrack-ng: "Unsupported file format (not a pcap or IVs file)."

Expected behavior
Steps 1-5 are the same.
6. .pcap files opening OK with wireshark/tcpdump/aircrack-ng.

Marauder (please complete the following information if applicable):

  • Firmware version: 0_11_0_rc3 and later
  • Hardware version: Flipper Zero dev-board (ESP32-S2)

Additional context
Last tried version with correct .pcap files was esp32_marauder_v0_10_8_20230621_flipper_sd_serial.bin

@thinkjk
Copy link

thinkjk commented Oct 10, 2023

I'm having the same issues, I've tried a few fixes from reddit and none of worked. I'm using the official dev board.

I'm running the latest unleashed (63) and using FZEasyMarauderFlash (with option 2) to flash

@justcallmekoko
Copy link
Owner

Have you tried this with the non serial SD version of the firmware and saving directly to an SD card connected to the ESP32?

@RekordNadoev
Copy link
Author

No unfortunately.
I've original FlipperZero dev-board with no SD only.
All i can tell: esp32_marauder_v0_10_8_20230621_flipper_sd_serial.bin does work, newer versions does not.

@RekordNadoev
Copy link
Author

Found ESP32 Marauder v6 hardware with SD and checked:

  • esp32_marauder_v0_11_1_20230907_new_hardware.bin
  • esp32_marauder_v0_12_1_20231005_new_hardware.bin
    Both seemed to work correctly. aircrack-ng opened both of the .pcap dumps.

So the problem is in flipper_sd_serial after v0_10_8

What additional info should i provide to help debug?

@thinkjk
Copy link

thinkjk commented Oct 10, 2023

ESP32 Marauder v6

I'm happy to help test on my dev board as well. and as @RekordNadoev mentioned there is no SD slot on the board by default.

@justcallmekoko
Copy link
Owner

I am currently working on a solution. The issue first appears in v0.11.0 and I've found it's cause. This will be fixed in v0.13.1

@RekordNadoev
Copy link
Author

Thank you for great job!

@justcallmekoko
Copy link
Owner

@thinkjk
Copy link

thinkjk commented Oct 15, 2023

All set https://github.com/justcallmekoko/ESP32Marauder/releases/tag/v0.13.1

Confirmed it's working for me now. Thanks @justcallmekoko!

@Ralhazrolex
Copy link

updated to v0.13.1 and still pcaps are zero bytes, what could I be missing?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants