Re: [tcpdump-workers] problem while examinate 802.11-packets

2008-02-17 Thread Christian Stalp
Guy Harris wrote: No, there's no way to track, for example, the Retry flag in the Frame Control field; the only packets you'll see outside of monitor mode are data frames, and the frame control field will be discarded - there's no place to put that information in a fake Ethernet header. So

Re: [tcpdump-workers] problem while examinate 802.11-packets

2008-02-15 Thread Christian Stalp
. > not sure for atheros cards... > > you should probably change > > dev = "ath0"; > > to > dev = "wifi0"; > > in your program and use your original version of the program. > > anybody, correct me if i am wrong... >

Re: [tcpdump-workers] problem while examinate 802.11-packets

2008-02-15 Thread Christian Stalp
e examinate 802.11-packets > > Christian, > > what happens, if you listen on the interface using tcpdump? > do you get 802.11 frames or do you get ethernet frames? > > i.e. is RFMON on? > > -alexm > 08:47 15/02/2008 > > > On Fri, 15 Feb 2008, Christi

Re: [tcpdump-workers] problem while examinate 802.11-packets

2008-02-15 Thread Christian Stalp
two are still trash. Gruss Christian Original-Nachricht > Datum: Thu, 14 Feb 2008 10:51:25 -0800 > Von: Guy Harris <[EMAIL PROTECTED]> > An: tcpdump-workers@lists.tcpdump.org > Betreff: Re: [tcpdump-workers] problem while examinate 802.11-packets > Christian Sta

Re: [tcpdump-workers] problem while examinate 802.11-packets

2008-02-15 Thread Christian Stalp
ess, but the last two fields are anything nonsence. A yes, I want to note, that I use Linux not BSD. Gruss Christian Original-Nachricht > Datum: Thu, 14 Feb 2008 10:51:25 -0800 > Von: Guy Harris <[EMAIL PROTECTED]> > An: tcpdump-workers@lists.tcpdump.org > B

[tcpdump-workers] problem while examinate 802.11-packets

2008-02-14 Thread Christian Stalp
Hello out there, I have a big problem to read incoming wlan-packets with pcap-library. First I introduced my program the ieee_802_11_header struct for casting: struct ieee_802_11_header { __u16 frame_control; // needs to be subtyped __u16 duration; __u8mac