dast.blog();

Thursday, November 30, 2006 #

How to scan for wireless access points on a Pocket PC?

I have also written a little Win32 console application in C++ that will show how to do it, to run it you have to install the PocketConsole from SymbolicTools:

// accesspoints.cpp : Defines the entry point for the console application.
//
#include "stdafx.h"
#include <windows.h>
#include <commctrl.h>
#include <stdlib.h>
#include <ntddndis.h>
#include <nuiouser.h>
#include <winioctl.h>
#include "strconv.h"

int _tmain(int argc, _TCHAR* argv[])
{
    if (argc < 2)
    {
        printf("Usage: accesspoints <adapter name> [delay in ms]\n");
        printf("       <adapter name> name of the wireless adapter\n");
        printf("       [delay in ms]  delay between scan and list query\n");
        return -1;
    }

LPCTSTR pszAdapter = argv[1];

HANDLE hDevice = CreateFile(
        NDISUIO_DEVICE_NAME, GENERIC_READ, 
        FILE_SHARE_READ | FILE_SHARE_WRITE, 
        NULL, OPEN_EXISTING, 
        FILE_ATTRIBUTE_NORMAL | FILE_FLAG_OVERLAPPED,
        NULL);

if (hDevice == INVALID_HANDLE_VALUE)
    {
        DWORD dwError = GetLastError();

printf("Function \"CreateFile\" failed (0x%08x).\n", dwError);
        return -2;
    }

DWORD dwBytesReturned = 0;

NDISUIO_QUERY_OID NDISUIOQueryOid = {0};
    NDISUIOQueryOid.ptcDeviceName = (PTCHAR) pszAdapter;
    NDISUIOQueryOid.Oid = OID_GEN_PHYSICAL_MEDIUM;

if (!DeviceIoControl(
        hDevice, IOCTL_NDISUIO_QUERY_OID_VALUE,
        &NDISUIOQueryOid, sizeof(NDISUIOQueryOid),
        &NDISUIOQueryOid, sizeof(NDISUIOQueryOid),
        &dwBytesReturned, NULL))
    {
        DWORD dwError = GetLastError();

CloseHandle(hDevice);
        printf("Function \"DeviceIoControl\" (OID_GEN_PHYSICAL_MEDIUM) failed (0x%08x).\n", 
            dwError);
        return -3;
    }

if (*((PNDIS_PHYSICAL_MEDIUM) NDISUIOQueryOid.Data) != NdisPhysicalMediumWirelessLan)
    {
        CloseHandle(hDevice);
        printf("Device \"%s\" is no wireless adapter.\n", CTtoA(pszAdapter));
        return -4;
    }

CTtoW deviceName(pszAdapter);

if (!DeviceIoControl(
        hDevice, IOCTL_NDISUIO_OPEN_DEVICE,
        (LPVOID)(LPCWSTR) deviceName,
        deviceName.GetLength() * sizeof(WCHAR),
        NULL, 0, &dwBytesReturned, NULL))
    {
        DWORD dwError = GetLastError();

CloseHandle(hDevice);
        printf("Function \"DeviceIoControl\" (IOCTL_NDISUIO_OPEN_DEVICE) failed (0x%08x).\n", 
            dwError);
        return -5;
    }

NDISUIO_SET_OID NDISUIOSetOid = {0};  
    NDISUIOSetOid.ptcDeviceName = (PTCHAR) pszAdapter;  
    NDISUIOSetOid.Oid = OID_802_11_BSSID_LIST_SCAN;

if (!DeviceIoControl(  
        hDevice, IOCTL_NDISUIO_SET_OID_VALUE,   
        &NDISUIOSetOid, sizeof(NDISUIOSetOid),   
        NULL, 0,   
        &dwBytesReturned, NULL))  
    {  
        DWORD dwError = GetLastError();  
  
        CloseHandle(hDevice);  
        printf("Function \"DeviceIoControl\" (OID_802_11_BSSID_LIST_SCAN) failed (0x%08x).\n",   
            dwError);  
        return -6;  
    }

if (argc >= 3)
    {
        Sleep((DWORD)_ttoi(argv[2]));
    }

for (int i = 1;; ++i)
    {
        const DWORD queryMemSize = sizeof(NDISUIO_QUERY_OID) + sizeof(NDIS_WLAN_BSSID_EX) * i;
        PNDISUIO_QUERY_OID pNDISUIOQueryOid = (PNDISUIO_QUERY_OID) malloc(queryMemSize);

pNDISUIOQueryOid->ptcDeviceName = (PTCHAR) pszAdapter;
        pNDISUIOQueryOid->Oid = OID_802_11_BSSID_LIST;

if (!DeviceIoControl(
            hDevice, IOCTL_NDISUIO_QUERY_OID_VALUE, 
            pNDISUIOQueryOid, queryMemSize, 
            pNDISUIOQueryOid, queryMemSize, 
            &dwBytesReturned, NULL))
        {
            DWORD dwError = GetLastError();

free(pNDISUIOQueryOid);

if (dwError == ERROR_INVALID_USER_BUFFER ||
                dwError == ERROR_INSUFFICIENT_BUFFER)
                continue;

CloseHandle(hDevice);
            printf("Function \"DeviceIoControl\" (OID_802_11_BSSID_LIST) failed (0x%08x).\n", 
                dwError);
            return -7;
        }

PNDIS_802_11_BSSID_LIST_EX pBssidList = (PNDIS_802_11_BSSID_LIST_EX) pNDISUIOQueryOid->Data;

const int accessPointsCnt = (int) pBssidList->NumberOfItems;

printf("Found %d access point(s).\n", accessPointsCnt);

PNDIS_WLAN_BSSID_EX pBssid = pBssidList->Bssid;

for (int j = 0; j < accessPointsCnt; ++j)
        {
            printf("\n");

printf("MacAddress        : %02X-%02X-%02X-%02X-%02X-%02X\n",
                pBssid->MacAddress[0], pBssid->MacAddress[1],
                pBssid->MacAddress[2], pBssid->MacAddress[3],
                pBssid->MacAddress[4], pBssid->MacAddress[5]);

char* pSSID = (char*) malloc(pBssid->Ssid.SsidLength + 1);
            memcpy(pSSID, pBssid->Ssid.Ssid, pBssid->Ssid.SsidLength);
            pSSID[pBssid->Ssid.SsidLength] = '\0';
            printf("Ssid              : %s\n", pSSID);
            free(pSSID);

printf("Privacy           : %s\n", pBssid->Privacy ? "Yes" : "No");
            printf("Rssi              : %ld dBm\n", pBssid->Rssi);
            printf("NetworkTypeInUse  : %s\n", 
                pBssid->NetworkTypeInUse == Ndis802_11FH ? "Ndis802_11FH" : 
                pBssid->NetworkTypeInUse == Ndis802_11DS ? "Ndis802_11DS" :
                "<unknown>");
            printf("BeaconPeriod      : %lu Kusec\n", pBssid->Configuration.BeaconPeriod);
            printf("ATIMWindow        : %lu Kusec\n", pBssid->Configuration.ATIMWindow);

if (pBssid->NetworkTypeInUse == Ndis802_11DS)
            {
                printf("DSConfig          : %lu kHz\n", pBssid->Configuration.DSConfig);
            }
            else if (pBssid->NetworkTypeInUse == Ndis802_11FH)
            {
                printf("HopPattern        : %lu\n", pBssid->Configuration.FHConfig.HopPattern);
                printf("HopSet            : %lu\n", pBssid->Configuration.FHConfig.HopSet);
                printf("DwellTime         : %lu Kusec\n", pBssid->Configuration.FHConfig.DwellTime);
            }

printf("InfrastructureMode: %s\n",
                pBssid->InfrastructureMode == Ndis802_11IBSS ? "Ndis802_11IBSS" :
                pBssid->InfrastructureMode == Ndis802_11Infrastructure ? "Ndis802_11Infrastructure" :
                pBssid->InfrastructureMode == Ndis802_11AutoUnknown ? "Ndis802_11AutoUnknown" :
                "<unknown>");

printf("SupportedRates    : [0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x, 0x%02x]\n",
                pBssid->SupportedRates[0], pBssid->SupportedRates[1], pBssid->SupportedRates[2], 
                pBssid->SupportedRates[3], pBssid->SupportedRates[4], pBssid->SupportedRates[5], 
                pBssid->SupportedRates[6], pBssid->SupportedRates[7]);

printf("                    BSSBasicRateSet (Mbps):");
            for (int n = 0; n < 8; ++n)
            {
                if (pBssid->SupportedRates[n] & 0x80)
                    printf(" %.1f", (pBssid->SupportedRates[n] & 0x7f) * 0.5f);
            }
            printf("\n");

printf("                    Others (Mbps):");
            for (int n = 0; n < 8; ++n)
            {
                if (!(pBssid->SupportedRates[n] & 0x80))
                    printf(" %.1f", (pBssid->SupportedRates[n] & 0x7f) * 0.5f);
            }
            printf("\n");

if (pBssid->Length >= sizeof(NDIS_802_11_BSSID_LIST_EX) && pBssid->IELength > 0)
            {
                printf("IEs               : [");
                for (ULONG n = 0; n < pBssid->IELength; ++n)
                {
                    printf("0x%02x", pBssid->IEs[n]);
                    if (n < pBssid->IELength - 1)
                        printf(", ");
                }
                printf("]\n");
            }
            
            pBssid = (PNDIS_WLAN_BSSID_EX) ((LPBYTE) pBssid + pBssid->Length);
        }

free(pNDISUIOQueryOid);

CloseHandle(hDevice);

return accessPointsCnt;
    }
}

The following image shows the output of the application running on our HP iPAQ hx2490b:

posted @ Thursday, November 30, 2006 5:31 PM | Feedback (0)

News

Google dast.blog();

Archives

Post Categories

Image Galleries

Artikel

CodeProject Artikel

Homepage

Links

PocketPCDN Artikel