Re: [tcpdump-workers] 802.11 + radio headers question...

2009-04-14 Thread Eddie Harari
Thanks for the quick response. Is there an RFC for 802.11 radio headers ? all the cards give same headers ? thanks , Eddie. On Mon, Apr 13, 2009 at 3:42 PM, Guy Harris wrote: > > On Apr 12, 2009, at 12:06 AM, Eddie Harari wrote: > > 802.11 headers there is data field, what it this data f

Re: [tcpdump-workers] 802.11 + radio headers question...

2009-04-14 Thread Mike Kershaw
On Tue, Apr 14, 2009 at 11:07:52AM -0400, Eddie Harari wrote: > Thanks for the quick response. > > Is there an RFC for 802.11 radio headers ? > all the cards give same headers ? The IEEE standard & combined standards for 11b/g/a are now free (they're linked off wikipedia or google should find the

Re: [tcpdump-workers] 802.11 + radio headers question...

2009-04-14 Thread Eddie Harari
so when i "sniff" a packet from my "monitor" mode intel chipset based wifi card , how do i know which radio info is preceding the 802.11 header ? On Tue, Apr 14, 2009 at 11:07 AM, Eddie Harari wrote: > Thanks for the quick response. > > Is there an RFC for 802.11 radio headers ? > all the cards

Re: [tcpdump-workers] 802.11 + radio headers question...

2009-04-14 Thread David Young
On Tue, Apr 14, 2009 at 11:54:50AM -0400, Eddie Harari wrote: > so when i "sniff" a packet from my "monitor" mode intel chipset based wifi > card , > how do i know which radio info is preceding the 802.11 header ? The DLT that you have set determines the radio header. For example, DLT_IEEE802_11_

Re: [tcpdump-workers] 802.11 + radio headers question...

2009-04-14 Thread Guy Harris
On Apr 14, 2009, at 8:54 AM, Eddie Harari wrote: so when i "sniff" a packet from my "monitor" mode intel chipset based wifi card , how do i know which radio info is preceding the 802.11 header ? The same way that, when you sniff a packet from any network adapter, you know what link-layer

Re: [tcpdump-workers] 802.11 + radio headers question...

2009-04-14 Thread Guy Harris
On Apr 14, 2009, at 9:24 AM, David Young wrote: On Tue, Apr 14, 2009 at 11:54:50AM -0400, Eddie Harari wrote: so when i "sniff" a packet from my "monitor" mode intel chipset based wifi card , how do i know which radio info is preceding the 802.11 header ? The DLT that you have set determin

Re: [tcpdump-workers] 802.11 + radio headers question...

2009-04-14 Thread Mike Kershaw
On Tue, Apr 14, 2009 at 09:58:31AM -0700, Guy Harris wrote: > > On Apr 14, 2009, at 9:24 AM, David Young wrote: > >> On Tue, Apr 14, 2009 at 11:54:50AM -0400, Eddie Harari wrote: >>> so when i "sniff" a packet from my "monitor" mode intel chipset based >>> wifi >>> card , >>> how do i know which r