Wireshark-bugs: [Wireshark-bugs] [Bug 9223] Can't capture packets with 802.11 headers on Windows
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 03 Oct 2013 19:15:51 +0000

changed bug 9223

What Removed Added
Status UNCONFIRMED RESOLVED
Resolution --- NOTOURBUG

Comment # 3 on bug 9223 from 
No, that's a *correct* dissection; those packets have Ethernet headers, even
though they were captured from an 802.11 interface, because either the adapter
or the driver is converting the 802.11, 802.2, and SNAP headers into a fake
Ethernet header.

To fix this, WinPcap would have to be changed to be an NDIS 6 driver on Windows
Vista and later and, for 802.11 interfaces, support the libpcap APIs for
entering monitor mode, and Wireshark would need to be built to use those APIs. 
You would then need to check the "Monitor mode" checkbox for the interface
options, so that you capture in monitor mode.  Note that, at least according to
Microsoft's documentation, this would mean your machine would lose its
association with whatever Wi-Fi network you're on.

So this is primarily a WinPcap issue.

You are receiving this mail because:
  • You are watching all bug changes.