Ethereal-users: Re: [Ethereal-users] Ethereal FAQ Confusion re Wireless

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Thu, 11 Jul 2002 21:51:20 -0700
On Thu, Jul 11, 2002 at 04:52:22PM -0700, Robinson, Eric R. wrote:
> Does the orinoco_cs driver with the patch allow raw frame capture or not?

I suggest you ask the AirSnort folks about that.  The stuff I put into
the FAQ was based on what the

	http://airsnort.shmoo.com/orinocoinfo.html

page says, and they seem to be claiming that, with the patch, it does
support monitor mode, delivering packets via a PF_PACKET socket, and a
PF_PACKET socket is what libpcap uses.

> The Ethereal FAQ says it SHOULD, but the driver deleoper says it's not built
> into the driver.

The patch isn't built into the driver.

However, the issue isn't whether the standard unpatched driver can
capture packets, it's whether the driver *with the patch* can capture
packets.

The airsnort.shmoo.com page with the URL above appears to imply that it
can, at least with some versions of Orinoco firmware.

Perhaps Gibson misinterpreted the mail to which he was replying; the
person who sent that mail said

> WL110 is just an Orinoco Gold card, and my problem is I can't make the card
> works in monitor mode under linux, using orinoco_cs 0.09b and patch from
> http://airsnort.shmoo.com/OrinocoPatch.html (nor using orinoco_cs 0.10).

implying that they were using a patched driver, but Gibson replied

> I haven't implemented monitor mode in the orinoco driver yet.

which sounds as if he was talking about his standard Orinoco driver.