ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
July 17th, 2024 | 10:00am-11:55am SGT (UTC+8) | Online

Ethereal-dev: Re: [Ethereal-dev] WLAN LLC type for Ethereal on Windows XP

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Tue, 27 Jun 2006 09:54:06 -0700
Paul Lin wrote:
I am writing WLAN windows driver to support Ethereal. All raw packets are send to Ethereal successfully without issue. However, Ethereal will always decode the packet as Ethernet II as LLC. There are no native 802.11 format in Windows XP, the packet has to pass to OS as 802.3 frame. In fact, we pass the whole 802.11 packet up without changing it to 802.3 format. The question is how do we let Ethereal know it’s 802.11 frame and not decoding it as 802.3 format?

Ask Microsoft and the WinPcap developers. Ethereal finds the link-layer type from libpcap/WinPcap, and libpcap/WinPcap finds it from NDIS, which is Microsoft code.
_______________________________________________
Ethereal-dev mailing list
Ethereal-dev@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-dev