ANNOUNCEMENT: Live Wireshark University & Allegro Packets online APAC Wireshark Training Session
April 17th, 2024 | 14:30-16:00 SGT (UTC+8) | Online

Wireshark-dev: Re: [Wireshark-dev] Problem with Intel® Wireless WiFi Link 4965AGN card

From: "Gianluca Varenni" <gianluca.varenni@xxxxxxxxxxxx>
Date: Tue, 9 Sep 2008 15:24:02 -0700
Short story: the wireless adapter is probably one of the two "Microsoft" ones.

Long story: starting from Vista, wireless drivers can be old style (NDIS 5.x) working exactly like in Windows 2000/XP, or native Wifi drivers (NDIS6). In this case the driver is lightweight and delivers 802.11 frames to an intermediate driver (developed by MS) that converts 802.11 frames into cooked 802.3 frames that can be managed by the upper protocols like the TCP/IP stack. This intermediate driver is also responsible for managing association/disassociation, BSSID scans and such. And this intermediate driver is also responsible for filtering the requests coming from the upper protocols (like WinPcap) for the underlying device description, and always returning "Microsoft" instead of e.g. "Intel Wireless 4965 Adapter".

I haven't looked if there is a possible workaround to the problem, yet.

Have a nice day
GV


----- Original Message ----- From: "Infoskop" <infoskop@xxxxxx>
To: <wireshark-dev@xxxxxxxxxxxxx>
Sent: Monday, September 08, 2008 3:11 PM
Subject: [Wireshark-dev] Problem with Intel® Wireless WiFi Link 4965AGN card


My card: Intel® Wireless WiFi Link 4965AGN
System: Windows Vista Home Premium

windump -D

1.\Device\NPF_{CE2BA077-B0FB-4C10-9507-7DA7230F9F4F} (MS Tunnel
Interface Driver)
2.\Device\NPF_{DC27B183-BF8D-4CE2-8C72-CAEDCC0CD4D8} (Realtek
RTL8168B/8111B PCI-E Gigabit Ethernet NIC)
3.\Device\NPF_{32CDA324-E1DF-4A9C-931F-3B3FF60FBDC8} (Microsoft)
4.\Device\NPF_{647885D2-8189-489E-9C84-C112F482C99A} (Microsoft)


My network devices:

Intel(R) Wireless WiFi Link 4965AGN
Realtek RTL8168B/8111B Family PCI-E Gigabit Ethernet NIC (NDIS 6.0)
Bluetooth Device (Protocol TDI RFCOMM)
Urządzenie Bluetooth (personal network)

Wireshark can't see my Wifi Card so I can't use it with Wireshark.
I don't know why windump calls my wifi card as MS tunnel Interface Driver.
_______________________________________________
Wireshark-dev mailing list
Wireshark-dev@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-dev