improved help (again)
@@ -7127,7 +7127,7 @@ printf("%s %s (C) %s ZeroBeat\n"
" default: %d usec\n"
"--eapoleaptimeout=<digit> : set EAPOL EAP TIMEOUT (microseconds) over entire request sequence\n"
" default: %d usec\n"
- "--bpfc=<file> : input Berkeley Packet Filter (BPF) code\n"
+ "--bpfc=<file> : input kernel space Berkeley Packet Filter (BPF) code\n"
" affected: incoming and outgoing traffic - that include rca scan\n"
" steps to create a BPF (it only has to be done once):\n"
" set hcxdumptool monitormode\n"
@@ -7141,17 +7141,7 @@ printf("%s %s (C) %s ZeroBeat\n"
" use the BPF code\n"
" $ hcxumptool -i <interface> --bpfc=attack.bpf ...\n"
" see man pcap-filter for a list of all filter options\n"
- "--filterlist_ap=<file> : ACCESS POINT MAC filter list\n"
- " format: 112233445566, 11:22:33:44:55:66, 11-22-33-44-55-66 # comment\n"
- " maximum entries %d\n"
- " run first --do_rcascan to retrieve information about the target\n"
- " using a filter list doesn't have an affect on rca scan\n"
- "--filterlist_client=<file> : CLIENT MAC filter list\n"
- " format: 112233445566, 11:22:33:44:55:66, 11-22-33-44-55-66 # comment\n"
- " maximum entries %d\n"
- " due to MAC randomization of the CLIENT, it does not always work!\n"
- " using a filter list doesn't have an affect on rca scan\n"
- "--filtermode=<digit> : mode for filter list\n"
+ "--filtermode=<digit> : user space filter mode for filter list\n"
" mandatory in combination with --filterlist_ap and/or --filterlist_client\n"
" affected: only outgoing traffic\n"
" notice: hcxdumptool act as passive dumper and it will capture the whole traffic on the channel\n"
@@ -7162,6 +7152,15 @@ printf("%s %s (C) %s ZeroBeat\n"
" only interact with ACCESS POINTs and CLIENTs from this list\n"
" not recommended, because some useful frames could be filtered out\n"
" using a filter list doesn't have an affect on rca scan\n"
+ " only for testing usefull - devices to be protected should be added to BPF\n"
+ "--filterlist_ap=<file> : ACCESS POINT MAC filter list\n"
+ " format: 112233445566, 11:22:33:44:55:66, 11-22-33-44-55-66 # comment\n"
+ " maximum entries %d\n"
+ " run first --do_rcascan to retrieve information about the target\n"
+ "--filterlist_client=<file> : CLIENT MAC filter list\n"
+ " format: 112233445566, 11:22:33:44:55:66, 11-22-33-44-55-66 # comment\n"
+ " maximum entries %d\n"
+ " due to MAC randomization of the CLIENT, it does not always work!\n"
"--weakcandidate=<password> : use this pre shared key (8...63 characters) for weak candidate alert\n"
" will be saved to pcapng to inform hcxpcaptool\n"
" default: %s\n"
