Wireshark · Wireshark-users: Re: [Wireshark-users] Wireshark-users Digest, Vol 71, Issue 13

["Leandro Engane" <leo.engane@xxxxxxxxx>]

Help

-mensag. original-
Assunto: Wireshark-users Digest, Vol 71, Issue 13
De: wireshark-users-request@xxxxxxxxxxxxx
Data: 15/04/2012 16:00

Send Wireshark-users mailing list submissions to
	wireshark-users@xxxxxxxxxxxxx

To subscribe or unsubscribe via the World Wide Web, visit
	https://wireshark.org/mailman/listinfo/wireshark-users
or, via email, send a message with subject or body 'help' to
	wireshark-users-request@xxxxxxxxxxxxx

You can reach the person managing the list at
	wireshark-users-owner@xxxxxxxxxxxxx

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Wireshark-users digest..."


Today's Topics:

   1. Problemi Ubiquiti SRC (seby slt)
   2. Re: Problemi Ubiquiti SRC (Guy Harris)


----------------------------------------------------------------------

Message: 1
Date: Sun, 15 Apr 2012 13:50:06 +0200
From: seby slt <slt@xxxxxxxxxx>
To: <wireshark-users@xxxxxxxxxxxxx>
Subject: [Wireshark-users] Problemi Ubiquiti SRC
Message-ID: <DUB107-W22F489D845D30D84DEC229D8390@xxxxxxx>
Content-Type: text/plain; charset="iso-8859-1"





 hello i have problem with ubiquiti src  ,no packet in promiscuous mode my card is compatible with wireshark ?  ciao hello 		 	   		  
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.wireshark.org/lists/wireshark-users/attachments/20120415/90c24a7d/attachment.html>

------------------------------

Message: 2
Date: Sun, 15 Apr 2012 11:24:27 -0700
From: Guy Harris <guy@xxxxxxxxxxxx>
To: Community support list for Wireshark
	<wireshark-users@xxxxxxxxxxxxx>
Subject: Re: [Wireshark-users] Problemi Ubiquiti SRC
Message-ID: <FECB262E-18BF-44ED-A2AB-E182E2F1DD2E@xxxxxxxxxxxx>
Content-Type: text/plain; charset=windows-1252


On Apr 15, 2012, at 4:50 AM, seby slt wrote:

> hello i have problem with ubiquiti src  ,no packet in promiscuous mode my card is compatible with wireshark ?

I assume by "with ubiquiti" you mean that you have some device from Ubiquiti Networks:

	http://www.ubnt.com/

At least from what the Wikipedia page about them:

	http://en.wikipedia.org/wiki/Ubiquiti_Networks

says, their devices might behave like Wi-Fi devices.

If you're using them with Windows, "compatible with Wireshark" really means "compatible with WinPcap" - Wireshark includes no code that knows about particular networking adapters except for AirPcap adapters, it relies on libpcap/WinPcap and the OS mechanisms atop which libpcap/WinPcap run - and, with WinPcap, Wi-Fi adapters don't work very well in promiscuous mode:

	http://www.winpcap.org/misc/faq.htm#Q-16

"The WinPcap device driver was developed to work primarily with Ethernet (10/100/1000) adapters. Support for other MACs was added during the development, but Ethernet remains the most tested one. 
The overall situation is:

	...

	? Wireless adapters: these adapters may present problems, because they are not properly supported by the Windows Kernel. Some of them are not detected, other don't support promiscuous mode. In the best case, WinPcap is able to see an Ethernet emulation and not the real transiting packets: this means that the 802.11 frames are transformed into fake Ethernet frames before being captured, and that control frames are not received."

------------------------------

_______________________________________________
Wireshark-users mailing list
Wireshark-users@xxxxxxxxxxxxx
https://wireshark.org/mailman/listinfo/wireshark-users


End of Wireshark-users Digest, Vol 71, Issue 13
***********************************************