> Speaking of radio headers for 802.11 and link[M:N], I'm not sure a > filter that tests those is necessarily useful - should the link[M:N] > filters just test the 802.11 header and payload, and skip radio headers > for the Prism, AVS, and radiotap headers? That way the same link[M:N] > filter can test the same 802.11 header fields regardless of whether > there's no radio header or one of the various radio headers.)
I'd definitely vote for keying the tests to the 802.11 fields themselves - the driver header fields don't (in any i've seen) provide src/dest info, so any matching should be done on the 802.11 frames themselves. -m -- There's too much blood in my caffeine system!
pgpMR0RZmsJ3I.pgp
Description: PGP signature
