Wireshark · Wireshark-bugs: [Wireshark-bugs] [Bug 9223] Can't capture packets with 802.11 headers on Windows

[bugzilla-daemon@xxxxxxxxxxxxx]

Guy Harris changed bug 9223

What	Removed	Added
Status	UNCONFIRMED	RESOLVED
Resolution	---	NOTOURBUG

Comment # 3 on bug 9223 from Guy Harris

No, that's a *correct* dissection; those packets have Ethernet headers, even
though they were captured from an 802.11 interface, because either the adapter
or the driver is converting the 802.11, 802.2, and SNAP headers into a fake
Ethernet header.

To fix this, WinPcap would have to be changed to be an NDIS 6 driver on Windows
Vista and later and, for 802.11 interfaces, support the libpcap APIs for
entering monitor mode, and Wireshark would need to be built to use those APIs. 
You would then need to check the "Monitor mode" checkbox for the interface
options, so that you capture in monitor mode.  Note that, at least according to
Microsoft's documentation, this would mean your machine would lose its
association with whatever Wi-Fi network you're on.

So this is primarily a WinPcap issue.

---

      You are receiving this mail because:

• You are watching all bug changes.