[BAT] tcpdump / ethereal while in monitor mode?

05 Apr 2002 01:39:44 -0500

i've been meaning to work on making ethereal's 802.11b support jive
prism headers and so on.... the problem is the 802.11b stuff in ethereal
uses the A3 format instead of A4 and has NO support for the hermes
(prism2) header..... so it wouldnt take 'that much' to make it work.. 
and you just have to coax ethereal into using that decoder on it...  cuz
its not passed down as a 802.11b frame.

alas, i dont have the time right now, graduating in 6 weeks.

--jay

On Thu, 2002-04-04 at 17:01, Alan Clegg wrote:
> Unless the network is lying to me again, Fridie, Brian said: 
> > Once I do a prism2ctl wi0 -m I can capture packets with ethereal. Ethereal
> > calls them malformed packets and can't decode them properly though. I'm 
> > using 0.91 which is supposed to support 802.11b frames. Are you at least 
> > getting this far?
> 
> Yes, everything looks like a "Malformed SAP packet"...  It looks like
> prismdump (http://www.hackworks.com/j/code/prismdump/) at least gets the
> packets into a file that I can then decode.
> 
> AlanC