On Wednesday, June 25, 2003, at 6:37AM, Antti wrote:
You mean I leave the filter empty? If I leave it empty I just get TCP
and http packages.
What other types of packets are you expecting to see? (Note that, as
my mail said, adding a filter isn't going to cause to to get *more*
packages; a filter can't cause *more* packages to be captured.)
If you were expecting to see 802.11 management or control frames, you
have to be running on a platform whose driver can put the interface
into "monitor mode", and you have to somehow turn monitor mode on...
Btw. I use rh 8.0.
...which, unfortunately, on Linux distributions is done in different
ways for different interfaces and different drivers and versions of the
drivers for those interfaces.
See
http://www.ethereal.com/faq.html#q5.30
for some information on this; see also
http://www.kismetwireless.net/documentation.shtml
which is the source of much of the information in the FAQ. (I have not
done any wireless monitor-mode sniffing whatsoever, so I can't answer
any "how do I turn monitor mode on?" or "why isn't this working?"
questions.)
