[Winpcap-users] Can't capture 802.11 management frame

[Wei Gao]

HI Guy,

Thank you very much for the tips. We are running on Vista and Windows 7, so there is always native wi-fi support. It looks like we can not get management or control frame via winpcap on Vista/Win7. Could you or somebody confirm? I found an email discussion from Gianluca as attached. Is that what you refer to?

I follow your link and track down the following information as in the below link. Is that exactly how Native Wi-Fi supports this?
http://msdn.microsoft.com/en-us/library/aa503317.aspx

Regards,

Wei

-----Original Message-----
From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Guy Harris
Sent: Friday, June 19, 2009 2:47 PM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] Can't capture 802.11 management frame


On Jun 19, 2009, at 12:37 PM, Wei Gao wrote:

> Just to add. We also used another tool proving that the NDIS driver  
> did send up management frames, so are kinda sure that the management  
> frame is tossed out somewhere by winpcap in our case.

Presumably you're running on Vista, Windows Server 2008, a Windows 7  
beta, or possibly Windows XP with a recent enough service pack, so  
that you have the Native 802.11 support:

	http://msdn.microsoft.com/en-us/library/aa503061.aspx

If so, then, if I remember correctly, the problem is that the WinPcap  
driver is an NDIS 5 driver, not an NDIS 6 driver, and doesn't support  
the calls required to capture in monitor mode:

	http://msdn.microsoft.com/en-us/library/aa503132.aspx
_______________________________________________
Winpcap-users mailing list
Winpcap-users at winpcap.org
https://www.winpcap.org/mailman/listinfo/winpcap-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090619/e7fb8839/attachment.htm