Ethereal-users: RE: [Ethereal-users] ethereal running on WLAN card

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Simon Hailstone" <Simon.Hailstone@xxxxxxxxxxxxxxxxxxx>
Date: Thu, 25 Mar 2004 17:14:59 -0000
Hi Puneet,
 
Looking at those two MAC addresses you don't recognise,
I have to say I am not surprised ;-)
 
If you consider them as ASCII :
 
4f:43:41:54:49:4f  == "OCATIO"
4e:3a:68:74:74:70 == 'N: http'
 
Regards
 
Simon Hailstone
Orthogon Systems
 
-----Original Message-----
From: ethereal-users-bounces@xxxxxxxxxxxx [mailto:ethereal-users-bounces@xxxxxxxxxxxx]On Behalf Of Puneet
Sent: 24 March 2004 10:43
To: ethereal-users@xxxxxxxxxxxx
Subject: [Ethereal-users] ethereal running on WLAN card

hi all,
 
i am trying to make ethereal on wlan on netgear MA311 PCI card 802.11b ( OS- Windows and ethereal 0.10.0 ). I wrote a small routine to put the card in monitor mode.
 
i guess i am able to put the card in monitor mode successfully. but when i started ethereal after putting the card in monitor mode. i am not getting the MAC header.
 
I have some queries. If you are interested i am attaching the trace file i got.
 
AP ip address- 192.168.0.1
user X- 192.168.1.100
My machine- 192.168.1.101
 
1. packet 53 is ARP and tells that some source MAC address is 4e:3a:68:74:74:70 and destination is 4f:43:41:54:49:4f. I don't have any source and MAC address like this in my network. what is this???
 
2.Packet 31 is a broadcast packet and source is my Netgear card. as far as i know packet transmission is not possible in monitor mode. then why ethereal is showing such packet. 
 
2. why i am not able to see MAC headers even though card is in monitor mode.
 
 
looking forward to get some food for thought from you gurus.
 
regards,
Puneet