Re: pcap filter for 802.11

[Chen Hsia Lee <u02112 () cs unipune ernet in>]

Hi,

I tried to set the wireless card into monitor mode using:
        iwconfig eth1 mode Monitor
The error it gave was:
        Error for wireless request "Set Mode" (8B06):
        SET failed on device eth1: Invalid argument

I also tried changing the Config file using
        echo: "Mode=rfmon" > /proc/driver/ethN/Config
(from the ethereal FAQ) but it did not work. 

The card is a CISCO 350 PCI card. Have I done something wrong or is there 
something wrong with the setup, maybe the drivers, etc?

Thanks a lot,
Chen


On Fri, 16 Apr 2004, alex medvedev wrote:

> bounced from the tcpdump-workers () lists sandelman ca as "user unknown"
>
> ---------- Forwarded message ----------
> Date: Fri, 16 Apr 2004 16:02:18 -0500 (CDT)
> From: alex medvedev <alexm () pycckue org>
> To: tcpdump-workers () lists sandelman ca
> Subject: Re: [tcpdump-workers] pcap filter for 802.11
>
> you also need to put the wireless card into monitor mode [with "iwconfig"
> or some other favorite command of yours].
> you want raw 802.11 frames with all headers.
> otherwise 802.11 headers will be stripped and you will get DLT_EN10MB link
> type and libpcap will think it is Etehrnet.
>
> -alexm
> 15:58 16/04/2004
>
> > On Apr 16, 2004, at 3:01 AM, Chen Hsia Lee wrote:
> >
> > >   I have just started using libpcap and am still unfamiliar with it.
> > > What is the filter expression to pick up only wireless 802.11 packets?
>
> ...
>
>
>
>
> -
> This is the tcpdump-workers list.
> Visit https://lists.sandelman.ca/ to unsubscribe.

-- 
Chen Hsia Lee
MSc 2nd Year
Pune University


-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.