---
name: "airtun-ng"
section: "1"
platform: "linux"
package: "aircrack-ng"
version: "1:1.0~rc1-2"
release: "Debian 5.0 (Lenny)"
platforms: ["linux"]
url: "https://new.carta.tech/airtun-ng"
---

# airtun-ng(1)

a virtual tunnel interface creator for aircrack-ng

## NAME

airtun-ng - a virtual tunnel interface creator for aircrack-ng

## SYNOPSIS

**airtun-ng** \[options\] \<interface name\>

## DESCRIPTION

**airtun-ng** creates a virtual tunnel interface (atX) for sending arbitrary IP packets by using raw ieee802.11 packet injection.

## OPTIONS

- *-H, --help*

  Shows the help screen.

- *-x \<pps\>*

  Sets maximum number of packets per second.

- *-a \<BSSID\>*

  Specifies the BSSID for the iee802.11 header.

- *-h \<SMAC\>*

  Specifies the source MAC for the iee802.11 header.

- *-i \<iface\>*

  Sets the capture interface.

- *-r \<file\>*

  Specifies a file to read 802.11 frames.

- *-y \<PRGA-file\>*

  Is the name of the file, which provides the keystream for WEP encoding. (No receiving, just transmitting of IP packets.)

- *-w \<WEP-key\>*

  This is the WEP key to en-/decrypt all traffic going through the tunnel.

- *-t \<tods\>*

  Defines the ToDS and FromDS bit in the ieee802.11 header. For tods=1, the ToDS bit is set to 1 and FromDS to 0, while tods=0 sets them the other way around.

- *-m \<netmask\>, --netmask \<netmask\>*

  Filters networks based on bssid ^ netmask combination. Needs -d, used in replay mode.

- *-d \<BSSID\>, --bssid \<BSSID\>*

  Filters networks based on the \<BSSID\>. Used in replay mode.

- *-f, --repeat*

  Enables replay mode. All read frames, filtered by bssid and netmask (if specified), will be replayed.

## EXAMPLES

**airtun-ng** -a 00:14:22:56:F3:4E -t 0 -y keystream.xor wlan0

## SEE ALSO

**[aircrack-ng(1)](/aircrack-ng/1.md)**\
 **[airdecap-ng(1)](/airdecap-ng/1.md)**\
 **[airdriver-ng(1)](/airdriver-ng/1.md)**\
 **[aireplay-ng(1)](/aireplay-ng/1.md)**\
 **[airmon-ng(1)](/airmon-ng/1.md)**\
 **[airodump-ng(1)](/airodump-ng/1.md)**\
 **[airolib-ng(1)](/airolib-ng/1.md)**\
 **[airsev-ng(1)](/airsev-ng/1.md)**\
 **[buddy-ng(1)](/buddy-ng/1.md)**\
 **[easside-ng(1)](/easside-ng/1.md)**\
 **[ivstools(1)](/ivstools/1.md)**\
 **[kstats(1)](/kstats/1.md)**\
 **[makeivs-ng(1)](/makeivs-ng/1.md)**\
 **[packetforge-ng(1)](/packetforge-ng/1.md)**\
 **[wesside-ng(1)](/wesside-ng/1.md)**