RE: Converting raw 802.11 (rfmon) capture file to standard libpcap

["Chris Eagle" <cseagle () redshift com>]

Jerry Shenk wrote:
> Does anybody know of a way to convert an rfmon capture file (raw 802.11)
> to standard libpcap?  The goal is to use 'normal' data stream analysis
> tools to analyze a previously captured data file.  One specific goal
> would be to use tcpreplay to play back an rfmon capture file over an
> Ethernet interface.  It would seem that tehtereal would be able to do
> this but I haven't figured it out yet.

Raw as generated by what means? There must be some delimiter for each packet
so it is trivial to read each each packet and slap a pcap header struct on
the front before writing the packet out to a pcap compatible file (one to
which you have already written a pcap file header).  Once complete, load it
into ethereal and analyze.

Chris


---------------------------------------------------------------------------
----------------------------------------------------------------------------