[Winpcap-users] Can't capture 802.11 management frame

[Gianluca Varenni]

  ----- Original Message ----- 
  From: Wei Gao 
  To: winpcap-users at winpcap.org 
  Sent: Friday, June 19, 2009 4:40 PM
  Subject: Re: [Winpcap-users] Can't capture 802.11 management frame


  HI Guy,

  Thank you very much for the tips. We are running on Vista and Windows 7, so there is always native wi-fi support. It looks like we can not get management or control frame via winpcap on Vista/Win7. Could you or 
  somebody confirm? I found an email discussion from Gianluca as attached. Is that what you refer to?

Yes, you cannot capture management/control frames. Also consider that even if Vista/Win7 have native wi-fi, the wireless network driver can still be NDIS5 i.e. not using the native wi-fi support.

Have a nice day
GV

  I follow your link and track down the following information as in the below link. Is that exactly how Native Wi-Fi supports this?
  http://msdn.microsoft.com/en-us/library/aa503317.aspx

  Regards,

  Wei

  -----Original Message-----
  From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Guy Harris
  Sent: Friday, June 19, 2009 2:47 PM
  To: winpcap-users at winpcap.org
  Subject: Re: [Winpcap-users] Can't capture 802.11 management frame


  On Jun 19, 2009, at 12:37 PM, Wei Gao wrote:

  > Just to add. We also used another tool proving that the NDIS driver  
  > did send up management frames, so are kinda sure that the management  
  > frame is tossed out somewhere by winpcap in our case.

  Presumably you're running on Vista, Windows Server 2008, a Windows 7  
  beta, or possibly Windows XP with a recent enough service pack, so  
  that you have the Native 802.11 support:

  http://msdn.microsoft.com/en-us/library/aa503061.aspx

  If so, then, if I remember correctly, the problem is that the WinPcap  
  driver is an NDIS 5 driver, not an NDIS 6 driver, and doesn't support  
  the calls required to capture in monitor mode:

  http://msdn.microsoft.com/en-us/library/aa503132.aspx
  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users




------------------------------------------------------------------------------


  _______________________________________________
  Winpcap-users mailing list
  Winpcap-users at winpcap.org
  https://www.winpcap.org/mailman/listinfo/winpcap-users
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.winpcap.org/pipermail/winpcap-users/attachments/20090624/91a4189e/attachment.htm