Ethereal-users: Re: [Ethereal-users] wlan

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Wed, 25 Jun 2003 09:43:34 -0700

On Wednesday, June 25, 2003, at 6:37AM, Antti wrote:

You mean I leave the filter empty? If I leave it empty I just get TCP and http packages.

What other types of packets are you expecting to see? (Note that, as my mail said, adding a filter isn't going to cause to to get *more* packages; a filter can't cause *more* packages to be captured.)

If you were expecting to see 802.11 management or control frames, you have to be running on a platform whose driver can put the interface into "monitor mode", and you have to somehow turn monitor mode on...

Btw. I use rh 8.0.

...which, unfortunately, on Linux distributions is done in different ways for different interfaces and different drivers and versions of the drivers for those interfaces.

See

	http://www.ethereal.com/faq.html#q5.30

for some information on this; see also

	http://www.kismetwireless.net/documentation.shtml

which is the source of much of the information in the FAQ. (I have not done any wireless monitor-mode sniffing whatsoever, so I can't answer any "how do I turn monitor mode on?" or "why isn't this working?" questions.)