Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] [Winpcap-users] how Wireshark get linktype?

From: "Joshua (Shiwei) Zhao" <swzhao@xxxxxxxxx>
Date: Tue, 1 Sep 2009 17:48:00 -0700
No it's not airpcap. But they don't want us to disclose their name yet :)
I have the driver source code and it does return media type as
NdisMedium802_11_Radio if it receives an OID as I mentioned earlier.
But the driver never sees a request for those OIDs.

In Wireshark I also tried to add code to send OIDs request to the
driver, using wpcap_packet_request(). If I define a new OID on both
side, it works fine. However, when I send an OID of
OID_GEN_MEDIA_SUPPORTED or OID_GEN_MEDIA_IN_USE, the driver never sees
this OID. It's lost somewhere? I still cannot figure out....


Thanks,
Joshua


On Tue, Sep 1, 2009 at 5:29 PM, Gianluca
Varenni<gianluca.varenni@xxxxxxxxxxxx> wrote:
> On Windows/WinPcap the only devices that support any of the wireless DLTs
> (DLT_IEEE802_11, DLT_IEEE802_11_RADIO or eventually DLT_PPI) are the AirPcap
> adapters.
>
> Are you using an AirPcap adapter?
>
> Have a nice day
> GV
>
> ----- Original Message -----
> From: "Joshua (Shiwei) Zhao" <swzhao@xxxxxxxxx>
> To: "Developer support list for Wireshark" <wireshark-dev@xxxxxxxxxxxxx>;
> <winpcap-users@xxxxxxxxxxx>
> Sent: Tuesday, September 01, 2009 4:41 PM
> Subject: [Winpcap-users] how Wireshark get linktype?
>
>
>> I'm using Wireshark 1.0.4 with a WiFi device. When I select the device
>> in capture options panel, I cannot get the expected linktype
>> DLT_IEEE802_11_RADIO.
>> I know the device driver is in monitor mode and it works if I manually
>> add a DLT_IEEE802_11_RADIO type there and choose it.
>> But how does Wireshark/winpcap get the default type, via a OID request
>> OID_GEN_MEDIA_SUPPORTED or OID_GEN_MEDIA_IN_USE?
>> I believe the driver does have support on these two OIDs.
>>
>> Is this a known problem or is there sth not compatible between my
>> driver and Wireshark/winpcap? I know Wireshark calls pcap_datalink()
>> to retrieve the media type.
>>
>> Many thanks,
>> Joshua
>> _______________________________________________
>> Winpcap-users mailing list
>> Winpcap-users@xxxxxxxxxxx
>> https://www.winpcap.org/mailman/listinfo/winpcap-users
>
> _______________________________________________
> Winpcap-users mailing list
> Winpcap-users@xxxxxxxxxxx
> https://www.winpcap.org/mailman/listinfo/winpcap-users
>