On Tue, Nov 10, 2009 at 12:57 PM, Tom Smith <ts8807...@gmail.com> wrote: > Made some progress: > > ifconfig rum0 chan 11 > ifconfig rum0 nwid TheOpenWAP > ifconfig rum0 mediaopt monitor > ifconfig rum0 up > > tcpdump -tttt -s 1514 -i rum0 -y IEEE802_11 > > This seems to capture a lot, but not quiet what I expect. Why in OpenBSD > does snaplen of 0 not work? > >
A snaplen of 0 on linux really means a snaplen of 2^16-1 which is "good enough". I'd imagine "tcpdump: invalid snaplen 0" was chosen because technically it's true, the linux thing is just a convenience hack that will bite someone down the line. What you want is to set your snaplen to be equal to your MTU, which is what I guess you're doing? -Nick
