[tcpdump-workers] DLT for Bluetooth Low Energy

2013-05-16 Thread dragorn
The list seems to be rejecting some posts, I just unsubbed/resubbed myself in the hopes that it wakes up and lets me post this time; it also bounced Mike Ryans post and he asked me to send it along. - Forwarded message from Mike Ryan - Date: Mon, 29 Apr 2013 13:09:32 -0700 From: Mike Rya

Re: [tcpdump-workers] Missing packet fields in big endian with ath9k

2013-04-28 Thread Mike Kershaw / Dragorn
Some drivers definitely change the format of the radiotap packets on the fly in the same stream. As Guy says, you need to look at the bit field in the header and parse the complex header. If all you care about is the dot11 header you can just skip the header using the length field. Also beware

Re: [tcpdump-workers] capturing on both interfaces simultaneously

2011-12-12 Thread dragorn
On Mon, Dec 12, 2011 at 12:53:38PM -0800, Guy Harris wrote: > > Will I ever see HT40+,40- in case of beacons. > > Probably not. > > > Does this field in radiotap header (if it occurs) mean the interface beacon > > came from was having the above (equivilantly n ) support ? > > No. This field i

Re: [tcpdump-workers] capturing on both interfaces simultaneously

2011-11-30 Thread dragorn
On Wed, Nov 30, 2011 at 01:06:19PM +0100, Joerg Mayer wrote: > On Mon, Nov 28, 2011 at 02:35:24PM -0500, abhinav narain wrote: > > I am using libpcap on Openwrt platform, Netgear router wndr3700v2. > > I am able to capture packets on phy0, interface. > > But what should I do to capture packets on p

Re: [tcpdump-workers] Question about pcap

2010-09-29 Thread dragorn
On Wed, Sep 29, 2010 at 06:52:32PM +0300, Nick Echidna wrote: > Hello, > I'm developing a program using pcap. I manage to successfully sniff the > desired packets but I was wondering something that the man page doesn't make > clear. > > Is it possible to block any specific network traffic? For exa