On Wed, Jan 26, 2005 at 01:44:28PM +0100, Karl Gaissmaier wrote: | Hello, | | the following bpf filters with ethernet addresses like | 'ether host <macaddr>' or synonym: 'wlan host <macaddr>' | and others with mac address checks like gateway, multicast, ... | are not handled within gencode.c if you monitor a WLAN device in | monitor mode with PRISM header prependend. | | There are missing CASE statements for DLT_PRISM_HEADER in | the different filter checks and a modified gen_wlanhostop | to shift the packet the prism header length, but using the | same logic as for the DLT_IEEE802_11 link layer. | | The same is true for the other driver specific prepended 802.11 | headers like DLT_IEEE802_11_RADIO and DLT_IEEE802_11_RADIO_AVS. | | It would be nice if someone could spend some time to fix this. |
now while you are it, you are welcome to submit a patch ... the "i don't think my code is good enough" excuse will not be accepted as there are enough competent reviewers on the list; /hannes - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
