xref: /netbsd/sys/dev/ic/wireg.h (revision c4a72b64)
1 /*	$NetBSD: wireg.h,v 1.42 2002/10/21 11:57:25 soren Exp $	*/
2 
3 /*
4  * Copyright (c) 1997, 1998, 1999
5  *	Bill Paul <wpaul@ctr.columbia.edu>.  All rights reserved.
6  *
7  * Redistribution and use in source and binary forms, with or without
8  * modification, are permitted provided that the following conditions
9  * are met:
10  * 1. Redistributions of source code must retain the above copyright
11  *    notice, this list of conditions and the following disclaimer.
12  * 2. Redistributions in binary form must reproduce the above copyright
13  *    notice, this list of conditions and the following disclaimer in the
14  *    documentation and/or other materials provided with the distribution.
15  * 3. All advertising materials mentioning features or use of this software
16  *    must display the following acknowledgement:
17  *	This product includes software developed by Bill Paul.
18  * 4. Neither the name of the author nor the names of any co-contributors
19  *    may be used to endorse or promote products derived from this software
20  *    without specific prior written permission.
21  *
22  * THIS SOFTWARE IS PROVIDED BY Bill Paul AND CONTRIBUTORS ``AS IS'' AND
23  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25  * ARE DISCLAIMED.  IN NO EVENT SHALL Bill Paul OR THE VOICES IN HIS HEAD
26  * BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27  * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28  * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29  * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30  * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31  * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
32  * THE POSSIBILITY OF SUCH DAMAGE.
33  */
34 
35 /*
36  * FreeBSD driver ported to NetBSD by Bill Sommerfeld in the back of the
37  * Oslo IETF plenary meeting.
38  */
39 
40 #define WI_TIMEOUT	65536
41 
42 #define WI_PORT0	(0 << 8)
43 #define WI_PORT1	(1 << 8)
44 #define WI_PORT2	(2 << 8)
45 #define WI_PORT3	(3 << 8)
46 #define WI_PORT4	(4 << 8)
47 #define WI_PORT5	(5 << 8)
48 
49 /*
50  * The WaveLAN/IEEE cards contain an 802.11 MAC controller which Lucent
51  * calls 'Hermes.' In typical fashion, getting documentation about this
52  * controller is about as easy as squeezing blood from a stone. Here
53  * is more or less what I know:
54  *
55  * - The Hermes controller is firmware driven, and the host interacts
56  *   with the Hermes via a firmware interface, which can change.
57  *
58  * - The Hermes is described in a document called: "Hermes Firmware
59  *   WaveLAN/IEEE Station Functions," document #010245, which of course
60  *   Lucent will not release without an NDA.
61  *
62  * - Lucent has created a library called HCF (Hardware Control Functions)
63  *   though which it wants developers to interact with the card. The HCF
64  *   is needlessly complex, ill conceived and badly documented. Actually,
65  *   the comments in the HCP code itself aren't bad, but the publically
66  *   available manual that comes with it is awful, probably due largely to
67  *   the fact that it has been emasculated in order to hide information
68  *   that Lucent wants to keep proprietary. The purpose of the HCF seems
69  *   to be to insulate the driver programmer from the Hermes itself so that
70  *   Lucent has an excuse not to release programming in for it.
71  *
72  * - Lucent only makes available documentation and code for 'HCF Light'
73  *   which is a stripped down version of HCF with certain features not
74  *   implemented, most notably support for 802.11 frames.
75  *
76  * - The HCF code which I have seen blows goats. Whoever decided to
77  *   use a 132 column format should be shot.
78  *
79  * Rather than actually use the Lucent HCF library, I have stripped all
80  * the useful information from it and used it to create a driver in the
81  * usual BSD form. Note: I don't want to hear anybody whining about the
82  * fact that the Lucent code is GPLed and mine isn't. I did not actually
83  * put any of Lucent's code in this driver: I only used it as a reference
84  * to obtain information about the underlying hardware. The Hermes
85  * programming interface is not GPLed, so bite me.
86  */
87 
88 /*
89  * Size of Hermes & Prism2 I/O space.
90  */
91 #define WI_IOSIZE		0x40
92 
93 /*
94  * Hermes & Prism2 register definitions
95  */
96 
97 /* Hermes command/status registers. */
98 #define WI_COMMAND		0x00
99 #define WI_PARAM0		0x02
100 #define WI_PARAM1		0x04
101 #define WI_PARAM2		0x06
102 #define WI_STATUS		0x08
103 #define WI_RESP0		0x0A
104 #define WI_RESP1		0x0C
105 #define WI_RESP2		0x0E
106 
107 /* Command register values. */
108 #define WI_CMD_BUSY		0x8000 /* busy bit */
109 #define WI_CMD_INI		0x0000 /* initialize */
110 #define WI_CMD_ENABLE		0x0001 /* enable */
111 #define WI_CMD_DISABLE		0x0002 /* disable */
112 #define WI_CMD_DIAG		0x0003
113 #define WI_CMD_ALLOC_MEM	0x000A /* allocate NIC memory */
114 #define WI_CMD_TX		0x000B /* transmit */
115 #define WI_CMD_NOTIFY		0x0010
116 #define WI_CMD_INQUIRE		0x0011
117 #define WI_CMD_ACCESS		0x0021
118 #define WI_CMD_PROGRAM		0x0022
119 #define WI_CMD_READEE		0x0030
120 
121 #define WI_CMD_CODE_MASK	0x003F
122 
123 /*
124  * Reclaim qualifier bit, applicable to the
125  * TX and INQUIRE commands.
126  */
127 #define WI_RECLAIM		0x0100 /* reclaim NIC memory */
128 
129 /*
130  * ACCESS command qualifier bits.
131  */
132 #define WI_ACCESS_READ		0x0000
133 #define WI_ACCESS_WRITE		0x0100
134 
135 /*
136  * PROGRAM command qualifier bits.
137  */
138 #define WI_PROGRAM_DISABLE	0x0000
139 #define WI_PROGRAM_ENABLE_RAM	0x0100
140 #define WI_PROGRAM_ENABLE_NVRAM	0x0200
141 #define WI_PROGRAM_NVRAM	0x0300
142 
143 /* Status register values */
144 #define WI_STAT_CMD_CODE	0x003F
145 #define WI_STAT_DIAG_ERR	0x0100
146 #define WI_STAT_INQ_ERR		0x0500
147 #define WI_STAT_CMD_RESULT	0x7F00
148 
149 /* memory handle management registers */
150 #define WI_INFO_FID		0x10
151 #define WI_RX_FID		0x20
152 #define WI_ALLOC_FID		0x22
153 #define WI_TX_CMP_FID		0x24
154 
155 /*
156  * Buffer Access Path (BAP) registers.
157  * These are I/O channels. I believe you can use each one for
158  * any desired purpose independently of the other.
159  * Currently, we only use BAP0, and perhaps BAP1 can be used
160  * within interrupt context.
161  */
162 #define WI_SEL0			0x18
163 #define WI_SEL1			0x1A
164 #define WI_OFF0			0x1C
165 #define WI_OFF1			0x1E
166 #define WI_DATA0		0x36
167 #define WI_DATA1		0x38
168 
169 #define WI_OFF_BUSY		0x8000
170 #define WI_OFF_ERR		0x4000
171 #define WI_OFF_DATAOFF		0x0FFF
172 
173 /* Event registers */
174 #define WI_EVENT_STAT		0x30	/* Event status */
175 #define WI_INT_EN		0x32	/* Interrupt enable/disable */
176 #define WI_EVENT_ACK		0x34	/* Ack event */
177 
178 /* Events */
179 #define WI_EV_TICK		0x8000	/* aux timer tick */
180 #define WI_EV_RES		0x4000	/* controller h/w error (time out) */
181 #define WI_EV_INFO_DROP		0x2000	/* no RAM to build unsolicited frame */
182 #define WI_EV_NO_CARD		0x0800	/* card removed (hunh?) */
183 #define WI_EV_DUIF_RX		0x0400	/* wavelan management packet received */
184 #define WI_EV_INFO		0x0080	/* async info frame */
185 #define WI_EV_CMD		0x0010	/* command completed */
186 #define WI_EV_ALLOC		0x0008	/* async alloc/reclaim completed */
187 #define WI_EV_TX_EXC		0x0004	/* async xmit completed with failure */
188 #define WI_EV_TX		0x0002	/* async xmit completed succesfully */
189 #define WI_EV_RX		0x0001	/* async rx completed */
190 
191 /* Host software registers */
192 #define WI_SW0			0x28
193 #define WI_SW1			0x2A
194 #define WI_SW2			0x2C
195 #define WI_SW3			0x2E 	/* does not appear in Prism2 */
196 
197 #define WI_CNTL			0x14
198 
199 #define WI_CNTL_AUX_ENA		0xC000
200 #define WI_CNTL_AUX_ENA_STAT	0xC000
201 #define WI_CNTL_AUX_DIS_STAT	0x0000
202 #define WI_CNTL_AUX_ENA_CNTL	0x8000
203 #define WI_CNTL_AUX_DIS_CNTL	0x4000
204 
205 #define WI_AUX_PAGE		0x3A
206 #define WI_AUX_OFFSET		0x3C
207 #define WI_AUX_DATA		0x3E
208 
209 #define WI_AUX_PGSZ		128
210 #define WI_AUX_KEY0		0xfe01
211 #define WI_AUX_KEY1		0xdc23
212 #define WI_AUX_KEY2		0xba45
213 
214 #define WI_COR			0x40	/* only for Symbol */
215 #define WI_COR_RESET		0x0080
216 #define WI_COR_IOMODE		0x0041
217 
218 #define WI_HCR			0x42	/* only for Symbol */
219 #define WI_HCR_4WIRE		0x0010
220 #define WI_HCR_RUN		0x0007
221 #define WI_HCR_HOLD		0x000f
222 #define WI_HCR_EEHOLD		0x00ce
223 
224 /*
225  * PCI Host Interface Registers (HFA3842 Specific)
226  * The value of all Register's Offset, such as WI_INFO_FID and WI_PARAM0,
227  * has doubled.
228  * About WI_PCI_COR: In this Register, only soft-reset bit implement; Bit(7).
229  */
230 #define WI_PCI_COR		0x4C
231 #define WI_PCI_HCR		0x5C
232 #define WI_PCI_MASTER0_ADDRH	0x80
233 #define WI_PCI_MASTER0_ADDRL	0x84
234 #define WI_PCI_MASTER0_LEN	0x88
235 #define WI_PCI_MASTER0_CON	0x8C
236 
237 #define WI_PCI_STATUS		0x98
238 
239 #define WI_PCI_MASTER1_ADDRH	0xA0
240 #define WI_PCI_MASTER1_ADDRL	0xA4
241 #define WI_PCI_MASTER1_LEN	0xA8
242 #define WI_PCI_MASTER1_CON	0xAC
243 
244 #define WI_COR_SOFT_RESET	(1 << 7)
245 #define WI_COR_CLEAR		0x00
246 
247 /*
248  * One form of communication with the Hermes is with what Lucent calls
249  * LTV records, where LTV stands for Length, Type and Value. The length
250  * and type are 16 bits and are in native byte order. The value is in
251  * multiples of 16 bits and is in little endian byte order.
252  */
253 struct wi_lt_hdr {
254 	u_int16_t		wi_len;
255 	u_int16_t		wi_type;
256 	/* value is vary depends on resource id */
257 };
258 
259 /*
260  * Download buffer location and length (0xFD01).
261  */
262 struct wi_dnld_buf {
263 	u_int16_t		wi_buf_pg; /* page addr of intermediate dl buf*/
264 	u_int16_t		wi_buf_off; /* offset of idb */
265 	u_int16_t		wi_buf_len; /* len of idb */
266 };
267 
268 /*
269  * Mem sizes (0xFD02).
270  */
271 struct wi_memsz {
272 	u_int16_t		wi_mem_ram;
273 	u_int16_t		wi_mem_nvram;
274 };
275 
276 /*
277  * NIC Identification (0xFD0B, 0xFD20)
278  */
279 struct wi_ver {
280 	u_int16_t		wi_ver[4];
281 };
282 
283 /* define card ident */
284 /* Lucent */
285 #define	WI_NIC_LUCENT_ID	0x0001
286 #define	WI_NIC_LUCENT_STR	"Lucent Technologies, WaveLAN/IEEE"
287 
288 #define	WI_NIC_SONY_ID		0x0002
289 #define	WI_NIC_SONY_STR		"Sony WaveLAN/IEEE"
290 
291 #define	WI_NIC_LUCENT_EMB_ID	0x0005
292 #define	WI_NIC_LUCENT_EMB_STR	"Lucent Embedded WaveLAN/IEEE"
293 
294 /* Intersil */
295 #define	WI_NIC_EVB2_ID		0x8000
296 #define	WI_NIC_EVB2_STR		"RF:PRISM2 MAC:HFA3841"
297 
298 #define	WI_NIC_HWB3763_ID	0x8001
299 #define	WI_NIC_HWB3763_STR	"RF:PRISM2 MAC:HFA3841 CARD:HWB3763 rev.B"
300 
301 #define	WI_NIC_HWB3163_ID	0x8002
302 #define	WI_NIC_HWB3163_STR	"RF:PRISM2 MAC:HFA3841 CARD:HWB3163 rev.A"
303 
304 #define	WI_NIC_HWB3163B_ID	0x8003
305 #define	WI_NIC_HWB3163B_STR	"RF:PRISM2 MAC:HFA3841 CARD:HWB3163 rev.B"
306 
307 #define	WI_NIC_EVB3_ID		0x8004
308 #define	WI_NIC_EVB3_STR		"RF:PRISM2 MAC:HFA3842 CARD:HFA3842 EVAL"
309 
310 #define	WI_NIC_HWB1153_ID	0x8007
311 #define	WI_NIC_HWB1153_STR	"RF:PRISM1 MAC:HFA3841 CARD:HWB1153"
312 
313 #define	WI_NIC_P2_SST_ID	0x8008	/* Prism2 with SST flush */
314 #define	WI_NIC_P2_SST_STR	"RF:PRISM2 MAC:HFA3841 CARD:HWB3163-SST-flash"
315 
316 #define	WI_NIC_EVB2_SST_ID	0x8009
317 #define	WI_NIC_EVB2_SST_STR	"RF:PRISM2 MAC:HFA3841 CARD:HWB3163-SST-flash"
318 
319 #define	WI_NIC_3842_EVA_ID	0x800A	/* Prism2 3842 Evaluation Board */
320 #define	WI_NIC_3842_EVA_STR	"RF:PRISM2 MAC:HFA3842 CARD:HFA3842 EVAL"
321 
322 #define	WI_NIC_3842_PCMCIA_AMD_ID	0x800B	/* Prism2.5 PCMCIA */
323 #define	WI_NIC_3842_PCMCIA_SST_ID	0x800C
324 #define	WI_NIC_3842_PCMCIA_ATM_ID	0x800D
325 #define	WI_NIC_3842_PCMCIA_STR		"RF:PRISM2.5 MAC:ISL3873B(PCMCIA)"
326 
327 #define	WI_NIC_3842_MINI_AMD_ID		0x8012	/* Prism2.5 Mini-PCI */
328 #define	WI_NIC_3842_MINI_SST_ID		0x8013
329 #define	WI_NIC_3842_MINI_ATM_ID		0x8014
330 #define	WI_NIC_3842_MINI_STR		"RF:PRISM2.5 MAC:ISL3874A(Mini-PCI)"
331 
332 #define	WI_NIC_3842_PCI_AMD_ID		0x8016	/* Prism2.5 PCI-bridge */
333 #define	WI_NIC_3842_PCI_SST_ID		0x8017
334 #define	WI_NIC_3842_PCI_ATM_ID		0x8018
335 #define	WI_NIC_3842_PCI_STR		"RF:PRISM2.5 MAC:ISL3874A(PCI-bridge)"
336 
337 #define	WI_NIC_P3_PCMCIA_AMD_ID		0x801A	/* Prism3 PCMCIA */
338 #define	WI_NIC_P3_PCMCIA_SST_ID		0x801B
339 #define	WI_NIC_P3_PCMCIA_STR		"RF:PRISM3 MAC:ISL3871(PCMCIA)"
340 
341 #define	WI_NIC_P3_MINI_AMD_ID		0x8021	/* Prism3 Mini-PCI */
342 #define	WI_NIC_P3_MINI_SST_ID		0x8022
343 #define	WI_NIC_P3_MINI_STR		"RF:PRISM3 MAC:ISL3871(Mini-PCI)"
344 
345 /*
346  * List of intended regulatory domains (0xFD11).
347  */
348 struct wi_domains {
349 	u_int16_t		wi_domains[6];
350 };
351 
352 /*
353  * CIS struct (0xFD13).
354  */
355 struct wi_cis {
356 	u_int16_t		wi_cis[240];
357 };
358 
359 /*
360  * Communications quality (0xFD43).
361  */
362 struct wi_commqual {
363 	u_int16_t		wi_coms_qual;
364 	u_int16_t		wi_sig_lvl;
365 	u_int16_t		wi_noise_lvl;
366 };
367 
368 /*
369  * Actual system scale thresholds (0xFC06, 0xFD46).
370  */
371 struct wi_scalethresh {
372 	u_int16_t		wi_energy_detect;
373 	u_int16_t		wi_carrier_detect;
374 	u_int16_t		wi_defer;
375 	u_int16_t		wi_cell_search;
376 	u_int16_t		wi_out_of_range;
377 	u_int16_t		wi_delta_snr;
378 };
379 
380 /*
381  * PCF info struct (0xFD87).
382  */
383 struct wi_pcf {
384 	u_int16_t		wi_medium_occupancy_limit;
385 	u_int16_t		wi_cfp_period;
386 	u_int16_t		wi_cfp_max_duration;
387 };
388 
389 /*
390  * Connection control characteristics. (0xFC00)
391  * 0 == IBSS (802.11 compliant mode) (Only PRISM2)
392  * 1 == Basic Service Set (BSS)
393  * 2 == Wireless Distribudion System (WDS)
394  * 3 == Pseudo IBSS
395  *	(Only PRISM2; not 802.11 compliant mode, testing use only)
396  * 6 == HOST AP (Only PRISM2)
397  */
398 #define	WI_PORTTYPE_IBSS	0x0
399 #define WI_PORTTYPE_BSS		0x1
400 #define WI_PORTTYPE_WDS		0x2
401 #define WI_PORTTYPE_ADHOC	0x3
402 #define	WI_PORTTYPE_HOSTAP	0x6
403 
404 /*
405  * Mac addresses. (0xFC01, 0xFC08)
406  */
407 struct wi_macaddr {
408 	u_int8_t		wi_mac_addr[6];
409 };
410 
411 /*
412  * Station set identification (SSID). (0xFC02, 0xFC04)
413  */
414 struct wi_ssid {
415 	u_int16_t		wi_len;
416 	u_int8_t		wi_ssid[32];
417 };
418 
419 /*
420  * Set our station name. (0xFC0E)
421  */
422 struct wi_nodename {
423 	u_int16_t		wi_nodelen;
424 	u_int8_t		wi_nodename[32];
425 };
426 
427 /*
428  * Multicast addresses to be put in filter. We're
429  * allowed up to 16 addresses in the filter. (0xFC80)
430  */
431 struct wi_mcast {
432 	struct ether_addr	wi_mcast[16];
433 };
434 
435 /*
436  * Join request. (0xFCE2)
437  */
438 struct wi_joinreq {
439 	struct ether_addr	wi_bssid;
440 	u_int16_t		wi_chan;
441 };
442 
443 /*
444  * Information frame types.
445  */
446 #define WI_INFO_NOTIFY		0xF000	/* Handover address */
447 #define WI_INFO_COUNTERS	0xF100	/* Statistics counters */
448 #define WI_INFO_SCAN_RESULTS	0xF101	/* Scan results */
449 #define WI_INFO_HOST_SCAN_RESULTS	0xF104	/* Scan results */
450 #define WI_INFO_LINK_STAT	0xF200	/* Link status */
451 #define	CONNECTED	1
452 #define	DISCONNECTED	2
453 #define	AP_CHANGE	3
454 #define	AP_OUT_OF_RANGE	4
455 #define	AP_IN_RANGE	5
456 #define	ASSOC_FAILED	6
457 #define WI_INFO_ASSOC_STAT	0xF201	/* Association status */
458 struct wi_assoc {
459 	u_int16_t		wi_assoc_stat;	/* Association Status */
460 #define	ASSOC		1
461 #define	REASSOC		2
462 #define	DISASSOC	3
463 #define	ASSOCFAIL	4
464 #define	AUTHFAIL	5
465 	u_int8_t		wi_assoc_sta[6];	/* Station Address */
466 	u_int8_t		wi_assoc_osta[6];	/* OLD Station Address */
467 	u_int16_t		wi_assoc_reason;	/* Reason */
468 	u_int16_t		wi_assoc_reserve;	/* Reserved */
469 };
470 
471 #define	WI_INFO_AUTH_REQUEST	0xF202	/* Authentication Request (AP) */
472 #define	WI_INFO_POWERSAVE_COUNT	0xF203	/* PowerSave User Count (AP) */
473 
474 /*
475  * Scan Results of Prism2 chip
476  */
477 
478 #define MAXAPINFO		30
479 struct wi_scan_header {
480 	u_int16_t		wi_reserve;	/* future use */
481 	u_int16_t		wi_reason;	/* The reason this scan was initiated
482 						   1: Host initiated
483 						   2: Firmware initiated
484 						   3: Inquiry request from host */
485 };
486 
487 struct wi_scan_data_p2 {
488 	u_int16_t		wi_chid;	/* BSS Channel ID from Probe Res.(PR)*/
489 	u_int16_t		wi_noise;	/* Average Noise Level of the PR */
490 	u_int16_t		wi_signal;	/* Signal Level on the PR */
491 	u_int8_t		wi_bssid[6];	/* MACaddress of BSS responder from PR */
492 	u_int16_t		wi_interval;	/* BSS beacon interval */
493 	u_int16_t		wi_capinfo;	/* BSS Capability Information
494 						   IEEE Std 802.11(1997) ,see 7.3.1.4 */
495 	u_int16_t		wi_namelen;	/* Length of SSID strings */
496 	u_int8_t		wi_name[32];	/* SSID strings */
497 	u_int16_t		wi_suprate[5];	/* Supported Rates element from the PR
498 						   IEEE Std 802.11(1997) ,see 7.3.2.2 */
499 	u_int16_t		wi_rate;	/* Data rate of the PR */
500 #define	WI_APRATE_1		0x0A		/* 1 Mbps */
501 #define	WI_APRATE_2		0x14		/* 2 Mbps */
502 #define	WI_APRATE_5		0x37		/* 5.5 Mbps */
503 #define	WI_APRATE_11		0x6E		/* 11 Mbps */
504 };
505 
506 /*
507  * Scan Results of Lucent chip
508  */
509 struct wi_scan_data {
510 	u_int16_t		wi_chid;	/* BSS Channel ID from PR */
511 	u_int16_t		wi_noise;	/* Average Noise Level of the PR */
512 	u_int16_t		wi_signal;	/* Signal Level on the PR */
513 	u_int8_t		wi_bssid[6];	/* MACaddress of BSS responder from PR */
514 	u_int16_t		wi_interval;	/* BSS beacon interval */
515 	u_int16_t		wi_capinfo;	/* BSS Capability Information
516 						   IEEE Std 802.11(1997) ,see 7.3.1.4 */
517 	u_int16_t		wi_namelen;	/* Length of SSID strings */
518 	u_int8_t		wi_name[32];	/* SSID strings */
519 };
520 
521 /*
522  * transmit/receive frame structure
523  */
524 struct wi_frame {
525 	u_int16_t		wi_status;	/* 0x00 */
526 	u_int16_t		wi_rx_tstamp1;	/* 0x02 */
527 	u_int16_t		wi_rx_tstamp0;	/* 0x04 */
528 	u_int8_t		wi_rx_silence;	/* 0x06 */
529 	u_int8_t		wi_rx_signal;	/* 0x07 */
530 	u_int8_t		wi_rx_rate;	/* 0x08 */
531 	u_int8_t		wi_rx_flow;	/* 0x09 */
532 	u_int8_t		wi_tx_rtry;	/* 0x0a */ /* Prism2 AP Only */
533 	u_int8_t		wi_tx_rate;	/* 0x0b */ /* Prism2 AP Only */
534 	u_int16_t		wi_tx_ctl;	/* 0x0c */
535 	struct ieee80211_frame_addr4 wi_whdr;	/* 0x0e */
536 	u_int16_t		wi_dat_len;	/* 0x2c */
537 	struct ether_header	wi_ehdr;	/* 0x2e */
538 } __attribute__((__packed__));
539 
540 /* Tx Status Field */
541 #define	WI_TXSTAT_RET_ERR	0x0001
542 #define	WI_TXSTAT_AGED_ERR	0x0002
543 #define	WI_TXSTAT_DISCONNECT	0x0004
544 #define	WI_TXSTAT_FORM_ERR	0x0008
545 
546 /* Rx Status Field */
547 #define WI_STAT_BADCRC		0x0001
548 #define WI_STAT_UNDECRYPTABLE	0x0002
549 #define WI_STAT_ERRSTAT		0x0003
550 #define WI_STAT_MAC_PORT	0x0700
551 #define	WI_STAT_PCF		0x1000
552 #define WI_RXSTAT_MSG_TYPE	0xE000
553 #define  WI_STAT_1042		0x2000	/* RFC1042 encoded */
554 #define  WI_STAT_TUNNEL		0x4000	/* Bridge-tunnel encoded */
555 #define  WI_STAT_WMP_MSG	0x6000	/* WaveLAN-II management protocol */
556 #define	 WI_STAT_MGMT		0x8000	/* 802.11b management frames */
557 
558 #define WI_ENC_TX_E_II		0x0E
559 
560 #define WI_ENC_TX_1042		0x00
561 #define WI_ENC_TX_TUNNEL	0xF8
562 
563 /* TxControl Field (enhanced) */
564 #define	WI_TXCNTL_TX_OK		0x0002
565 #define	WI_TXCNTL_TX_EX		0x0004
566 #define	WI_TXCNTL_STRUCT_TYPE	0x0018
567 #define	 WI_ENC_TX_802_3	0x00
568 #define	 WI_ENC_TX_802_11	0x08
569 #define	WI_TXCNTL_ALTRTRY	0x0020
570 #define	WI_TXCNTL_NOCRYPT	0x0080
571