Wireshark · Wireshark-dev: Re: [Wireshark-dev] how to set capture filters?

["Joshua (Shiwei) Zhao" <swzhao@xxxxxxxxx>]

I'm trying on winxp and I'm getting 802.11 headers in monitor mode.
I'm using Wireshark GUI instead of tshark, Wireshark 1.2.2 and winpcap 4.0.2.

Thanks,
Joshua


On Tue, Jan 19, 2010 at 12:51 PM, Guy Harris <guy@xxxxxxxxxxxx> wrote:
>
> On Jan 19, 2010, at 12:45 PM, Joshua (Shiwei) Zhao wrote:
>
>> How could I set a capture filter to only capture, e.g, wlan management frames?
>> I could not find an exact answer by searching around. I tried sth like
>> 'wlan mgt' or 'type mgt' but it didn't work.
>
> On what OS is this?
>
> What's the output of "tshark -v"?
>
> Are you capturing in monitor mode?  Are you getting 802.11 headers, or just Ethernet headers?
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev@xxxxxxxxxxxxx>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>             mailto:wireshark-dev-request@xxxxxxxxxxxxx?subject=unsubscribe
>