Re: Converting raw 802.11 (rfmon) capture file to standard libpcap

[James Golovich <james () wwnet net>]

On Sun, 11 Jan 2004, Jerry Shenk wrote:

> Does anybody know of a way to convert an rfmon capture file (raw 802.11)
> to standard libpcap?  The goal is to use 'normal' data stream analysis
> tools to analyze a previously captured data file.  One specific goal
> would be to use tcpreplay to play back an rfmon capture file over an
> Ethernet interface.  It would seem that tehtereal would be able to do
> this but I haven't figured it out yet.

ethereal/tethereal comes with a tool that can do this called editcap.
It's been a while since I've used it but I kind of remember using it like:
editcap -T ieee-802-11 infile outfile
or 
editcap -T ieee-802-11-radio infile outfile
depending on what format the capture type is

James


---------------------------------------------------------------------------
----------------------------------------------------------------------------