3004a3005
> 	struct ieee80211com *ic = &sc->sc_ic;
3017c3018,3023
< 	try0 = ph->try[0];
---
> //	try0 = ph->try[0];
> 	try0 = (ic->ic_opmode == IEEE80211_M_MONITOR) ? 1 : ph->try[0];
> 	/*
> 	 * The retry value has to be patched to 1 when injecting,
> 	 * otherwise the sequence number will be overwritten
> 	 */
3041c3047
< 	if (IEEE80211_IS_MULTICAST(wh->i_addr1)) {
---
> 	if (IEEE80211_IS_MULTICAST(wh->i_addr1) || ((ic->ic_opmode == IEEE80211_M_MONITOR) && (skb->data[1]&3) != 0x01) ) {