Thanks As far as I know, packet injection is not possible on the built-in chip, the drivers need to modified to make it possible to pass raw data on the "wire". But that would be the best solution.