Hi folks -

This patch adds the monitor mode packet injection stuff that was talked 
about a week or so ago to mac80211.  Using a radiotap header prepended 
to the injection payload was felt to be a reasonable way forward.

The patch can deal with a variable-sized radiotap header containing any 
fields that are understood by Linux, although currently it skips 
everything except antenna, power and rate selection.  You just put an 
interface in monitor mode and direct packets at it, selecting rate and 
so on by using radiotap semantics.

Along with this patch I have also updated packetspammer

http://warmcat.com/packetspammer-0.3.tar.gz

to allow it to send [ radiotap + ieee80211 + payload ] packets from 
userspace into a Monitor mode interface.  The --help and README both 
show how to do it.  At the moment it simply injects a 54Mbps packet with 
a ping-type payload in it to fixed fake MAC addresses, you can see these 
packets from another box running in Monitor mode on the same channel.

I tested the rate action with a zd1211rw-mac80211 USB device and it 
seems to be happy.  I'm not sure how to test the antenna selection 
action and didn't try to test the tx power selection action yet.

The patch is against Linville's FC7 #4 test kernel sources, which are 
only a few days old.

-Andy