On May 7, 2004, at 11:02 AM, Rob Henningsgard wrote:
If you are referring to Cisco's management packets, then WinPCap does capture them. I just saw this yesterday while checking out Ethereal (see http://www.ethereal.com ) in a WiFi-equipped coffee shop with a Cisco router.
Ethereal running on Windows?
If so, what sort of management packets are those? Are those sent as 802.11 data packets with an 802.2 LLC header and, probably, a SNAP header?
If so, those might not be the "management frames" Suresh is referring to - he's probably referring to 802.11 management packets, which are different from data packets. WinPcap, for everything other than PPP interfaces and DAG cards, uses NDIS to connect to the link-layer driver, and, as far as I know, the 802.11 link-layer drivers on Windows supply fake Ethernet packets through the NDIS interfaces, and, while 802.11 data packets can be turned into fake Ethernet packets (either with an Ethernet header or an 802.2 header), 802.11 management packets can't.
================================================================== This is the WinPcap users list. It is archived at http://www.mail-archive.com/[EMAIL PROTECTED]/
To unsubscribe use mailto: [EMAIL PROTECTED]
==================================================================
