Ethereal-dev: Re: [Ethereal-dev] Sniffing ieee802.11 packet?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 18 Sep 2002 13:36:55 -0700
On Wed, Sep 18, 2002 at 01:21:59PM -0700, vahid aftahi wrote:
> Is there a possibility to look at packets from IEEE802.11 wireless LAN?

Yes.

If you don't care about seeing the raw 802.11 packets (i.e., if it's OK
to see only LLC packets, and to see them as Ethernet packets), that
should work on any platform.

Otherwise, see

	http://www.ethereal.com/faq.html#q5.24

> if so , how do we go about this as a root user in Linux?

See the FAQ cited above.

> Need prismdump to run to get the dump?!!

No, you just need the right type of network cards and reasonably recent
versions of drivers for those cards.

> How to get "prismdump" to work with "wtap"?

prismdump, as far as I know, writes out libpcap-format captures, so they
should be readable by Ethereal - or by recent versions of tcpdump, for
that matter - with nothing special needed.