Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-users: Re: [Wireshark-users] Wireshark for Beacon Sniffing

From: Johne Cookcely <johne1921@xxxxxxxx>
Date: Wed, 21 Jan 2009 19:47:39 -0500
Hi! OmniPeek was on Windows xpsp2, Wireshark is on Linux ubuntu8.04. I'll try to make small examples that demonstrate this issue! Is there any web space where I can post them? Thanks!

> From: guy@xxxxxxxxxxxx
> To: wireshark-users@xxxxxxxxxxxxx
> Date: Wed, 21 Jan 2009 16:40:49 -0800
> Subject: Re: [Wireshark-users] Wireshark for Beacon Sniffing
>
>
> On Jan 21, 2009, at 3:33 PM, Johne Cookcely wrote:
>
> > Hi! I am moving to wireshark for use in sniffing wireless 802.11
> > beacons. My team used to use Wildpackets OminPeek. However, I am
> > having an issue. Wireshark averages 166305 beacons/hr in my
> > location, channel 6, while OmniPeek averaged 293149 beacon/hr, same
> > location, same channel, same card.
>
> Same operating system? Probably not, as:
>
> OmniPeek is Windows-only;
>
> Wireshark uses WinPcap on Windows to capture packets, and WinPcap
> uses NDIS to see packets;
>
> Windows prior to Vista doesn't support supplying management packets
> such as beacons to NDIS, and Vista supports it but WinPcap doesn't
> support that mechanism;
>
> so you're probably not running Wireshark on Windows to capture beacons
> (you'd get 0 beacons/hr on Windows unless you're using an AirPcap
> adapter, and OmniPeek doesn't support AirPcap adapters, as far as I
> know).
>
> What version of what OS are you running Wireshark on?
> ___________________________________________________________________________
> Sent via: Wireshark-users mailing list <wireshark-users@xxxxxxxxxxxxx>
> Archives: http://www.wireshark.org/lists/wireshark-users
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
> mailto:wireshark-users-request@xxxxxxxxxxxxx?subject=unsubscribe


Windows Live™ Hotmail®…more than just e-mail. See how it works.