Re: pcap filter for 802.11

[alex medvedev <alexm () pycckue org>]

bounced from the tcpdump-workers () lists sandelman ca as "user unknown"

---------- Forwarded message ----------
Date: Fri, 16 Apr 2004 16:02:18 -0500 (CDT)
From: alex medvedev <alexm () pycckue org>
To: tcpdump-workers () lists sandelman ca
Subject: Re: [tcpdump-workers] pcap filter for 802.11

you also need to put the wireless card into monitor mode [with "iwconfig"
or some other favorite command of yours].
you want raw 802.11 frames with all headers.
otherwise 802.11 headers will be stripped and you will get DLT_EN10MB link
type and libpcap will think it is Etehrnet.

-alexm
15:58 16/04/2004

> On Apr 16, 2004, at 3:01 AM, Chen Hsia Lee wrote:
>
> >     I have just started using libpcap and am still unfamiliar with it.
> > What is the filter expression to pick up only wireless 802.11 packets?

...




-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.