Ethereal-users: Re: [Ethereal-users] ethereal and PrismDump packets

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Joe Tomasone <joe@xxxxxxxx>
Date: Wed, 19 Dec 2001 11:43:09 -0500
Unless I am missing something, Prismdump does not work with non-Prism cards. Cisco is not a Prism-II based card. 

        - Joe


At 12:55 AM 12/13/2001, you wrote:

Dear ALL,

I tried to use Ethereal to Decode PrismDump packets
from a WLAN setup.

Somehow, the second Octet in every packet is always
wrong, resulting in Ethereal decoding the the packet
as some other format. I checked though that the rest
of the packet is correct.

All i want to do is to do implement some form of a low
cost WLAN monitoring on my own network. But its been a
really rough ride.

First, Ethereal with Libpcap (2001-11-26) seems to
always get the bytes starting with the WEP-IVs wrong
(the first part of every other packet is
correct...i.e....BSSID, Dest MAC...etc..).

PrismDump can get the whole thing right (i think) but
somehow its 802.11 dump is intepreted by ethereal as
some LLC packet.

My setup is RH7.2, Libpcap (2001-11-26), Ethereal
(0.8.20) and a Cisco Aironet 350 card.

Can anyone help?

Regards
Darren


__________________________________________________
Do You Yahoo!?
Check out Yahoo! Shopping and Yahoo! Auctions for all of
your unique holiday gifts! Buy at http://shopping.yahoo.com
or bid at http://auctions.yahoo.com

_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users