Re: [Wireshark-dev] The best practice to capture on the raw 802.11 interface on Windows

2016-10-07 Thread Yang Luo
And although I didn't find the evidence in the code, I hope that Wireshark won't call pcap_can_set_rfmon() for adapters which are not even wireless adapters. Because if we open the adapter in pcap_can_set_rfmon(), this function will be slower than before and impacts the performance for a large amou

Re: [Wireshark-dev] The best practice to capture on the raw 802.11 interface on Windows

2016-10-07 Thread Yang Luo
Hi Guy, Thanks for the clarification! I still have one question. *I can't find a way to check which 802.11 operation modes an adapter supports without querying OID in Npcap driver.* I have posted a question here: http://stackoverflow.com/questions/39928736/how-to-get-the-supported-802-11-operatio

Re: [Wireshark-dev] The best practice to capture on the raw 802.11 interface on Windows

2016-10-07 Thread Guy Harris
On Oct 7, 2016, at 8:20 AM, Yang Luo wrote: > What value should PacketGetNetType() return for a wireless adapter? > NdisMedium802_3 or NdisMediumRadio80211? > > This value reflects on Wireshark Capture Options's "Link-layer header", and > controls how Wireshark dissects the packets. As you sai

Re: [Wireshark-dev] The best practice to capture on the raw 802.11 interface on Windows

2016-10-07 Thread Yang Luo
Hi Guy, I have encountered one issue when implementing as what you said. This is: *What value should PacketGetNetType() return for a wireless adapter? NdisMedium802_3 or NdisMediumRadio80211?* This value reflects on Wireshark Capture Options's "Link-layer header", and controls how Wireshark diss

Re: [Wireshark-dev] The best practice to capture on the raw 802.11 interface on Windows

2016-10-06 Thread Guy Harris
On Oct 6, 2016, at 10:19 AM, Yang Luo wrote: > I'm working on the new raw 802.11 capture feature with Npcap on Windows these > days. This new raw 802.11 feature doesn't need to install different versions > of Npcap to turn on/off the raw 802.11 mode. In Wireshark, Npcap will provide > two inte

[Wireshark-dev] The best practice to capture on the raw 802.11 interface on Windows

2016-10-06 Thread Yang Luo
Hi list, I'm working on the new raw 802.11 capture feature with Npcap on Windows these days. This new raw 802.11 feature doesn't need to install different versions of Npcap to turn on/off the raw 802.11 mode. In Wireshark, Npcap will provide two interfaces which can be chosen for each wireless ada