<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
FONT-SIZE: 10pt;
FONT-FAMILY:Tahoma
}
</style>
</head>
<body class='hmmessage'>
Hi again, <BR>
<BR>
first at all, thanks for reply, continued about capturing wlan packet with winpcap item <BR>
<BR>
this solution:<BR>
<BR>
When Winpcap captures on a wireless adapter, it sees the packets as though they are Ethernet packets. By this I mean that the 802.11 data header is stripped off and a fake Ethernet header is composed and appended to the packet. This isn't Winpcap's fault, however, as this is done before Winpcap has access to the packet. In short, if you want to capture traffic and analyze any data beneath the MAC layer then this solution will work for you.<BR>
<BR>
if I treat wlan packets like ethernet packets, when I am programming my source code, I program like if was ethernet?<BR>
<BR>
pcap_datalink(adhandle) = DLT_EN10MB<BR>
<BR>
and for another solution:<BR>
<BR>
However, if you need access to the raw 802.11 packets and all the control and management frames, this solution will not work and an 802.11 capture card should be considered instead.<BR>
<BR>
It's mean that I have to get a wlan card (pcmcia, usb) that support promiscuos mode?<BR>
and use...<BR>
<BR>
pcap_datalink(adhandle) = DLT_IEEE802_11 ?<BR>
<BR>
<BR>
<BR>
thanks.<BR><BR>
<BR>
<BR>
<BR>
<BR>
<BR><BR> <BR>
<BLOCKQUOTE>
<HR>
Date: Wed, 19 Dec 2007 09:47:57 -0800<BR>From: dustin.johnson@cacetech.com<BR>To: winpcap-users@winpcap.org<BR>Subject: Re: [Winpcap-users] Capturing wlan packets<BR><BR>
<META content="Microsoft SafeHTML" name=Generator>Ziara,<BR> When Winpcap captures on a wireless adapter, it sees the packets as though they are Ethernet packets. By this I mean that the 802.11 data header is stripped off and a fake Ethernet header is composed and appended to the packet. This isn't Winpcap's fault, however, as this is done before Winpcap has access to the packet. In short, if you want to capture traffic and analyze any data beneath the MAC layer then this solution will work for you. However, if you need access to the raw 802.11 packets and all the control and management frames, this solution will not work and an 802.11 capture card should be considered instead.<BR><BR>-- <BR>Dustin Johnson<BR><B>CACE Technologies</B><BR>Tel: 530-758-2790 x109<BR>Fax: 530-758-2781<BR><A href="http://www.cacetech.com/" target=_blank>www.cacetech.com</A><BR><BR>Ziara . wrote:
<BLOCKQUOTE cite=mid:BLU120-W22349D99C74AA80C24EF3D825C0@phx.gbl>
<STYLE>
.ExternalClass .EC_hmmessage P
{padding:0px;}
.ExternalClass EC_body.hmmessage
{font-size:10pt;font-family:Tahoma;}
</STYLE>
<FONT face="Courier New">Hello, it's possible capturing wlan packets with winpcap? I have research some information, and say that:<BR></FONT> <BR><FONT face="Courier New, Courier, Monospace">"WinPcap is able to see an Ethernet emulation and not the real transiting packets: this means that the 802.11 frames are transformed into fake Ethernet frames before being captured, and that control frames are not received" </FONT><BR> <BR><FONT face="Courier New, Courier, Monospace">and... how I can capturing with this method?</FONT><BR> <BR><FONT face="Courier New">And, I find a page <A href="http://www.micro-logix.com/WinPcap/Supported.asp" target=_blank>http://www.micro-logix.com/WinPcap/Supported.asp</A> where list the devices wlan that work with airsnare it's means that work with my application with winpcap too?</FONT><BR> <BR><FONT face="Courier New">Are there some specific documentation to capturing wlan packets with winpcap?</FONT><BR> <BR><FONT face="Courier New">regards and thanks.</FONT><BR><BR>
<HR>
Sigue al minuto las principales noticias de tu ciudad <A href="http://deportes.es.msn.com/" target=_blank>MSN Deportes</A> <PRE><HR width="90%" SIZE=4>
_______________________________________________
Winpcap-users mailing list
<A class=EC_moz-txt-link-abbreviated href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</A>
<A class=EC_moz-txt-link-freetext href="https://www.winpcap.org/mailman/listinfo/winpcap-users" target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A>
</PRE></BLOCKQUOTE><BR>
<DIV class=EC_moz-signature><BR><A href="http://www.cacetech.com/" target=_blank></A></DIV></BLOCKQUOTE><br /><hr />Tecnología, moda, motor, viajes,.suscríbete a nuestros boletines para estar siempre a la última <a href='http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance&Brand=WL&RU=http%3a%2f%2fmail.live.com' target='_new'>MSN Newsletters</a></body>
</html>