Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-dev: [Wireshark-dev] What's the difference between NdisMediumBare80211 (DLT_IEEE802_1

From: Yang Luo <hsluoyb@xxxxxxxxx>
Date: Thu, 31 Mar 2016 08:09:49 +0800
Hi list,

I'm adding Native 802.11 capture support to Npcap and demonstrate it on Wireshark. (See: https://github.com/nmap/npcap/releases/download/v0.06-r13/npcap-nmap-0.06-r13-wifi.exe). I found that the there are two 802.11 related values to show the adapter type: NdisMediumBare80211 and NdisMediumRadio80211


And Packet.dll translates them based on the following code:

case NdisMediumBare80211:
p->linktype = DLT_IEEE802_11;
break;

case NdisMediumRadio80211:
p->linktype = DLT_IEEE802_11_RADIO;
break;

So I want to know which value should I use for native 802.11 capturing?


Cheers,
Yang