On Tue, Jun 13, 2006 at 02:36:50PM -0400, Matthew Belcher wrote: > > Hi all, > > I'm working on setting up radiotap header capture on Linux. I'm running the > latest kernel (2.6.16.18) with the radiotap extensions compiled in. I'm using > the madwifi-ng driver with an Atheros card. I pulled the latest tcpdump from > CVS. It looks like tcpdump is receiving the radiotap packets, but it can't > decode them. Here's the output I get: > > 21:22:43.157339 unknown IEEE802.11 frame type (3)(header) unknown IEEE802.11 > frame type (3)unknown 802.11 frame type (3) > 0x0000: ffff ffff ffff 0002 6f21 e671 0806 0321 > 0x0010: 0800 0604 0001 0002 6f21 e671 c0a8 0101 > 0x0020: 0000 0000 0000 c0a8 0102 > > Has anyone been able to get this to work?
Are you running it with -s0 (or some larger-than-default capture size)? A full RT header can be bigger than the 32 or 64 or whatever the default # of bytes is for tcpdump to process. -m -- Mike Kershaw/Dragorn <[EMAIL PROTECTED]> GPG Fingerprint: 3546 89DF 3C9D ED80 3381 A661 D7B2 8822 738B BDB1 Know the rules other people live by. Know them well. Know them in the same way terrorists know about cars: so that you know where to put the bomb.
pgpP81Q8yXxfI.pgp
Description: PGP signature
