Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: Re: [Wireshark-dev] [Winpcap-users] how Wireshark get linktype?

From: "Gianluca Varenni" <gianluca.varenni@xxxxxxxxxxxx>
Date: Tue, 1 Sep 2009 18:32:03 -0700
Is it an NDIS 6.x driver?

Have a nice day
GV

----- Original Message ----- From: "Joshua (Shiwei) Zhao" <swzhao@xxxxxxxxx>
To: <winpcap-users@xxxxxxxxxxx>
Cc: "Developer support list for Wireshark" <wireshark-dev@xxxxxxxxxxxxx>
Sent: Tuesday, September 01, 2009 5:48 PM
Subject: Re: [Winpcap-users] how Wireshark get linktype?


No it's not airpcap. But they don't want us to disclose their name yet :)
I have the driver source code and it does return media type as
NdisMedium802_11_Radio if it receives an OID as I mentioned earlier.
But the driver never sees a request for those OIDs.

In Wireshark I also tried to add code to send OIDs request to the
driver, using wpcap_packet_request(). If I define a new OID on both
side, it works fine. However, when I send an OID of
OID_GEN_MEDIA_SUPPORTED or OID_GEN_MEDIA_IN_USE, the driver never sees
this OID. It's lost somewhere? I still cannot figure out....


Thanks,
Joshua


On Tue, Sep 1, 2009 at 5:29 PM, Gianluca
Varenni<gianluca.varenni@xxxxxxxxxxxx> wrote:
On Windows/WinPcap the only devices that support any of the wireless DLTs
(DLT_IEEE802_11, DLT_IEEE802_11_RADIO or eventually DLT_PPI) are the AirPcap
adapters.

Are you using an AirPcap adapter?

Have a nice day
GV

----- Original Message -----
From: "Joshua (Shiwei) Zhao" <swzhao@xxxxxxxxx>
To: "Developer support list for Wireshark" <wireshark-dev@xxxxxxxxxxxxx>;
<winpcap-users@xxxxxxxxxxx>
Sent: Tuesday, September 01, 2009 4:41 PM
Subject: [Winpcap-users] how Wireshark get linktype?


I'm using Wireshark 1.0.4 with a WiFi device. When I select the device
in capture options panel, I cannot get the expected linktype
DLT_IEEE802_11_RADIO.
I know the device driver is in monitor mode and it works if I manually
add a DLT_IEEE802_11_RADIO type there and choose it.
But how does Wireshark/winpcap get the default type, via a OID request
OID_GEN_MEDIA_SUPPORTED or OID_GEN_MEDIA_IN_USE?
I believe the driver does have support on these two OIDs.

Is this a known problem or is there sth not compatible between my
driver and Wireshark/winpcap? I know Wireshark calls pcap_datalink()
to retrieve the media type.

Many thanks,
Joshua
_______________________________________________
Winpcap-users mailing list
Winpcap-users@xxxxxxxxxxx
https://www.winpcap.org/mailman/listinfo/winpcap-users

_______________________________________________
Winpcap-users mailing list
Winpcap-users@xxxxxxxxxxx
https://www.winpcap.org/mailman/listinfo/winpcap-users

_______________________________________________
Winpcap-users mailing list
Winpcap-users@xxxxxxxxxxx
https://www.winpcap.org/mailman/listinfo/winpcap-users