Ethereal-users: Re: [Ethereal-users] Ethereal, Cisco350 and Red-Hat7.2

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Wed, 28 Nov 2001 01:00:37 -0800
On Mon, Nov 26, 2001 at 10:35:40AM -0500, Joe Tomasone wrote:
> The Cisco card is not PrismII based, and therefore cannot be used as I 
> described above.  I do not know of any driver other than the one for 
> AiroPeek that will put that card into monitor mode.

I know of two that will work with at least some Aironet cards:

	1) the current Linux 2.4.x "airo.c" driver (by "current" I mean
	   the current kernel version; I don't remember whether support
	   for that first went into 2.4.9 or into an earlier release);

	2) the -stable and -current FreeBSD Aironet drivers (the
	   versions in FreeBSD 4.4 doesn't support monitor mode).

On FreeBSD, you'd use the "ancontrol" utility to put the card into
monitor mode.  I think there's a comand you use on Linux to do the same.

Both of those should work with the current CVS version of libpcap, or
with the 0.7 version.  (On FreeBSD, if you enable "full Aironet header
returned by BPF", it probably won't work, as I think it uses a
link-layer header type not supported by libpcap or Ethereal yet.)