Re: Want to capture WLAN packets

Guy Harris <[email protected]> Fri, 28 Jul 2006 10:45:03 -0700
Newsgroups gmane.network.ethereal.devel
Message-ID <[email protected]>
madhur wrote:

> I want to capture 802.11 WLAN packets from Ethereal. But when I tried 
> with NetGear wireless card, I was able to capture Ping packets
> 
> But It was not showing any WLAN packets like
> 
> 1)       Beacon frames
> 
> 2)       Authentication request/response
> 
> 3)       Association request/response
> 
>  
> 
> So please any buddy can tell me how to capture these packets.

Step 1: do *NOT* run Windows on your machine.  NDIS (which is what the 
WinPcap driver uses), and the standard 802.11 drivers on Windows, have 
no mechanism to allow a driver or application to request that it see 
802.11 management frames.

Which NetGear card do you have?  Linux and/or one or more of the 
free-software BSDs might support the card and support putting it into 
monitor mode.  (Note that, in monitor mode, most if not all network 
adapters do *not* support being associated with a network, so you can 
only do passive traffic capture.)