Ethereal-users: Re: [Ethereal-users] Avaya/Cisco card

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Fri, 20 Jun 2003 12:33:01 -0700

On Thursday, June 19, 2003, at 6:50PM, s.chapke@xxxxxxxxxxxxxxxxxxxx wrote:
I have managed to put the Avaya card into monitor mode using the patch provided by airsnort.shmoo.com/orinocoinfo.html . But when I run ethereal i get ff:ff:ff:.. as the source address and the protocol as SLL. Does anybody know why?

It's probably because the version of libpcap that Ethereal is using doesn't know about the ARPHRD_ type you've set up the card to use. If you've told it to use ARPHRD_IEEE80211_PRISM, try telling it to use ARPHRD_IEEE80211 instead; if *that* doesn't work, you'll have to get a newer version of libpcap from tcpdump.org and build with that. (What does "ethereal -v" print?)