Yes, we encapsulate *all* 802.11 frames in the firmware in a LLC encapsulated frame (in promiscuous mode). I have a dissector for these frames, but what kept me from sending it to the list is that we didn't implement the fragmentation in the firmware and the reassembly in the dissector. The frames passed up by the firmware have a maximum size of 1514 bytes. That is including Ethernet header, LLC header and our own radio header. Therefore longer (data) frames have to be fragmented by the firmware. We designed the mechanism for that but we didn't implement it.
-----Oorspronkelijk bericht-----
Van: ethereal-dev-bounces@xxxxxxxxxxxx
[mailto:ethereal-dev-bounces@xxxxxxxxxxxx]Namens Guy Harris
Verzonden: woensdag 29 september 2004 20:43
Aan: Ethereal development
Onderwerp: Re: [Ethereal-dev] help needed about sniffing on WLAN
Martijn Schipper wrote:
> No, I mean all 802.11 frames are encapsulated in 802.3 frames by our firmware.
Including management frames? 802.3 frames don't have any way of
indicating 802.11 management frames - it looks, from a patch somebody
sent us a while ago (that's now checked in) as if some Windows driver
for some 802.11 adapter in Centrino systems, or the firmware for that
adapter, puts management frames into 802.3 frames with a special
Ethernet type value.
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev
******************Legal Disclaimer**************************
"This email may contain confidential and privileged material for the sole use of the intended recipient. Any unauthorized review, use or distribution by others is strictly prohibited. If you have received the message in error, please advise the sender by reply email and delete the message. Thank you."
****************************************************************
