|   ----- Original Message ----- 
 Sent: Tuesday, February 08, 2005 6:04 PM Subject: filters for wireless packets
 Hi all,   I have 3 laptops with wireless NIC's which are 
configured and associated to work in Infrastructure mode. Data will get transferred between 2 laptops which i 
need to capture from the 3rd laptop. When the data is transferring between the 
two laptops i am running the tcpdump command in the 3rd laptop setting 
the card to monitor mode with the filter _expression_ "wlan host 
MAC address of 1st laptop or wlan host MAC address 
of 2nd laptop or wlan host MAC address of the AP to 
which both are associated. tcpdump is displaying beacons and all the data 
packets but it is not displaying the ACK frames which will be there for every 
data packet. I really dont know what filter expressions to give 
to capture all the data transfer and ack's for that. I dont want to see any 
other packets in the air other than packets sent from my 2 laptops and the AP to 
which they are associated. Can anyone help me regarding setting the filter 
_expression_ for this scenario,   Thanks in advance, Shantha   |