bounced from the [EMAIL PROTECTED] as "user unknown" ---------- Forwarded message ---------- Date: Fri, 16 Apr 2004 16:02:18 -0500 (CDT) From: alex medvedev <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [tcpdump-workers] pcap filter for 802.11
you also need to put the wireless card into monitor mode [with "iwconfig" or some other favorite command of yours]. you want raw 802.11 frames with all headers. otherwise 802.11 headers will be stripped and you will get DLT_EN10MB link type and libpcap will think it is Etehrnet. -alexm 15:58 16/04/2004 > On Apr 16, 2004, at 3:01 AM, Chen Hsia Lee wrote: > > > I have just started using libpcap and am still unfamiliar with it. > > What is the filter expression to pick up only wireless 802.11 packets? ... - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.