Re: [tcpdump-workers] What's the difference between NdisMediumBare80211 (DLT_IEEE802_11) and NdisMediumRadio80211 (DLT_IEEE802_11_RADIO)

2016-04-06 Thread Guy Harris
On Apr 6, 2016, at 5:41 PM, Yang Luo wrote: > I wonder why this mail went to my spam.. I don't know anything about radiotap > header so I'm afraid i'm not supplying it. It's a way to provide "radio metadata" for packets; see http://www.radiotap.org for a description of it. If you wer

Re: [tcpdump-workers] What's the difference between NdisMediumBare80211 (DLT_IEEE802_11) and NdisMediumRadio80211 (DLT_IEEE802_11_RADIO)

2016-04-06 Thread Yang Luo
Hi Guy, I wonder why this mail went to my spam.. I don't know anything about radiotap header so I'm afraid i'm not supplying it. And I have confirmed that my captured packets are parsed well using NdisMediumBare80211. In Wireshark it shows "IEEE 802.11 Data". So I think I will just use this value.