The attached patch fixes several issues with monitor mode:
- Record the correct rate for transmitted packets (both prism and radiotap encapsulations were referencing the rx rate even for tx frames, which was wrong).
- Record the antenna for tranmitted packets instead of just using 0
- Record the TSF for tranmitted packets when using radiotap
- Don't expose kernel memory to userspace in ieee80211_input_monitor
ieee80211_input_monitor was taking a u_int32_t containing the TSF for the frame, but was copying 8 bytes of memory into the monitoring header from it's address. This patch changes ieee80211_input_monitor to take a u_int64_t and touches the appropriate parts in ath/if_ath.c.