This is a problem (feature?) of windows networking. NDIS exports several MACs (802.11, PPP, VPN...) to the protocols like a fake Ethernet. This is probably done to make the life of protocol witers easier, but has the drawbacks that you have noted with WinPcap, whose capture driver is implemented as a protocol. The only way that I know to solve the problem is writing a custom NIC driver that exports the raw frames to the applications, which is obviously not simple...
Loris > Hi: > I also found this problem. WinPcap can't capture packets > by some 802.11b adapters (like Cisco Aironet 350 > series, Intel PRO/Wireless 2011B PC card ... etc) on WLAN, > but it can work on Avaya wireless PC GOLD card and > 3com wireless PC card. Although Avaya and 3com crads can work, > packets captured are all in 802.3 ethernet MAC frame format, > not in 802.11b MAC frame format. It is like simulating an ethernet > environment on the WLAN. > I work on WinXP platform. Does anyone tell me why? > Thanks a lot!!! > > Best Regards, > Tim > > > ----- Original Message ----- > From: "Magnus Olsson" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Saturday, June 07, 2003 2:29 AM > Subject: Re: [WinPcap-users] PacketGetNetType > > > > Thanks for the help, I solved it on my own, it turned out to be a coding > > error from my side, really > > sorry about this ;) > > > > I can however inform anyone who is interested that > > 1) PacketGetNetType() works just fine on WinXP using my Orinoco wireless > > PC Silver card > > 2) The link speed DOES change, so there is no need to re-init the pcap > > adapter, by simply calling > > PacketGetNetType() again will get you a correct value. > > 3) I'm using WinCap 3.0 (latest available from the winpcap homepage). > > > > Loris Degioanni wrote: > > > > >Hi, > > > > > > > > > > > > > > >>I'm having problem with the PacketGetNetType() function of Packet.dll. I > > >>realize this isn't part of the WinPCap libs, but at least WinPCap > > >>depends on them. > > >> > > >>I call PacketGetNetType() and the LinkSpeed is ALWAYS > > >>100000000 (100 mbps), which isn't true. I've tried these on > > >>several machines, 1 with 100 mbps, 1 with 10 mbps card and > > >>1 with a WLAN card (11 mbps). They all report 100 mbps. > > >> > > >> > > > > > >Which OS/WinPcap version are you using? > > > > > > > > > > > >>Am I doing something wrong or is this a known bug in the packet > > >>routine? > > >> > > >>Also, I would like to know if this routine is cached anyway? I want > > >>to use it to graph the linkspeed of my WLAN card where the speed > > >>varies, so if I call PacketGetNetType(), will I have to "re-open" the > > >>pcap object before each call? I was thinking maybe the linkspeed was > > >>simply put into a private variable at init and then simply returned from > > >>that when you call PacketGetNetType() > > >> > > >> > > > > > >PacketGetNetType retrieves that value from the NIC driver by means of an > OID > > >call mediated by the packet driver. > > >I think that you shouldn't need to reopen the handle, but I never tried > and > > >this could depend on the particular NIC. > > > > > >Loris > > > > > > > > > > > >>Any help is appreciated, thanks in advance! > > >> > > >> > > >> > > >>================================================================== > > >> This is the WinPcap users list. It is archived at > > >> http://www.mail-archive.com/[EMAIL PROTECTED]/ > > >> > > >> To unsubscribe use > > >> mailto: [EMAIL PROTECTED] > > >>================================================================== > > >> > > >> > > > > > > > > > > > > > > >================================================================== > > > This is the WinPcap users list. It is archived at > > > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > > > > > To unsubscribe use > > > mailto: [EMAIL PROTECTED] > > >================================================================== > > > > > > > > > > > > > > > > > > > > > > ================================================================== > > This is the WinPcap users list. It is archived at > > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > > > To unsubscribe use > > mailto: [EMAIL PROTECTED] > > ================================================================== > > > > > > > ================================================================== > This is the WinPcap users list. It is archived at > http://www.mail-archive.com/[EMAIL PROTECTED]/ > > To unsubscribe use > mailto: [EMAIL PROTECTED] > ================================================================== > > ================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/ To unsubscribe use mailto: [EMAIL PROTECTED] ==================================================================
