[ https://bro-tracker.atlassian.net/browse/BIT-529?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=20037#comment-20037 ]
grigorescu commented on BIT-529: -------------------------------- Seth, you want to take this one? Since you have topic/seth/radiotap ? > Support for DLT IEEE802_11_RADIO linktype > ----------------------------------------- > > Key: BIT-529 > URL: https://bro-tracker.atlassian.net/browse/BIT-529 > Project: Bro Issue Tracker > Issue Type: New Feature > Components: Bro > Affects Versions: git/master > Reporter: gregor > Priority: Low > > {noformat} > #!rst > Add support for DLT IEEE802_11_RADIO to Bro. It appears this linktype adds a > bunch of info from the WLAN radio in front of the actual ethernet header. > Unfortunately, it appears to have variable length headers, to adding support > to Bro is not trivial. > Many (all?) wlan interface can create pcap captures with this DLT. E.g, one > can use > * ``tcpdump -I ....`` or > * ``tcpdump -y IEEE802_11_RADIO`` (depending on OS and tcpdump version used) > On my Mac OS ``tcpdump -I`` works. > {noformat} -- This message was sent by Atlassian JIRA (v6.4-OD-15-055#64014) _______________________________________________ bro-dev mailing list bro-dev@bro.org http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev