On Jul 14, 2011, at 7:41 AM, suad alasady wrote:
> i would like to capture ieee 802.11 data frame
Also, if:
the *only* frames you care about are data frames - you don't need to
see management or control frames;
you don't care whether you see the 802.11 header - it's fine if the
packets have a fake Ethernet header;
you only need to see frames going to or from your machine - you do
*not* need to see any frames sent from some other machine to some other machine;
you might be able to do it on Windows if you turn promiscuous mode *off*. For
WinDump, dumpcap, or TShark (or Wireshark if you start the capture from the
command line), that means passing the "-p" flag to the program. For Wireshark,
that means un-checking the "Promiscuous mode" check box.
_______________________________________________
Winpcap-users mailing list
[email protected]
https://www.winpcap.org/mailman/listinfo/winpcap-users
