Wireshark-dev: [Wireshark-dev] What's the difference between NdisMediumBare80211 (DLT_IEEE802_1
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Yang Luo <hsluoyb@xxxxxxxxx>
Date: Thu, 31 Mar 2016 08:09:49 +0800
Hi list,

I'm adding Native 802.11 capture support to Npcap and demonstrate it on Wireshark. (See: https://github.com/nmap/npcap/releases/download/v0.06-r13/npcap-nmap-0.06-r13-wifi.exe). I found that the there are two 802.11 related values to show the adapter type: NdisMediumBare80211 and NdisMediumRadio80211


And Packet.dll translates them based on the following code:

case NdisMediumBare80211:
p->linktype = DLT_IEEE802_11;
break;

case NdisMediumRadio80211:
p->linktype = DLT_IEEE802_11_RADIO;
break;

So I want to know which value should I use for native 802.11 capturing?


Cheers,
Yang