On Fri, Nov 02, 2001 at 11:49:19PM -0800, ganglu wrote:
> Does anybody know whether the pcap works on the
> lucent's ORINOCO wavlan card?
> 
> I just read the bpf.h, and there is no Data-link level type codes
> for IEEE802.11 like DLT_EN10MB for ethernet.

Drivers for 802.11 cards often make the card look like an Ethernet card
to networking code above the driver, so the link level type code for an
802.11 card might well be DLT_EN10MB.

If you want to see *raw* 802.11 traffic from libpcap, you need the
current CVS version of libpcap, or the 0.7 beta version of libpcap, for
that link-level type code - it's DLT_IEEE802_11.

However, you can only get that on:

        1) Linux systems with sufficiently recent kernels (the patches
           to the Airolan driver to support that showed up in 2.4.7 or
           so, I think);

        2) FreeBSD systems with Doug Ambrisko's patches to the Airolan
           driver and changes to support Cisco's Linux utilities on BSD.

(Perhaps support has been added to other BSDs as well.)

It also only works if the driver supports it; there are Airolan drivers
that do, but I don't know whether there are any Linux or BSD Orinoco
drivers that do.

> One other thing, how can I write data directly to the device instead of
> through TCP/UDP?

That depends on the OS you're running.  Currently, libpcap has no
support for transmitting packets; you'd have to use whatever raw packet
I/O mechanism your OS has (which is probably the same mechanism that
libpcap uses to read raw packets).
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to