[prev in list] [next in list] [prev in thread] [next in thread] 

List:       tcpdump-workers
Subject:    Re: [tcpdump-workers] Radio tap headers (DLT 127)
From:       Eddie Harari <eddie.harari () gmail ! com>
Date:       2009-05-13 22:27:15
Message-ID: bc9ebf1d0905131527r60436aebr4a8778ef514c3a27 () mail ! gmail ! com
[Download RAW message or body]

problem solved. (passed wrong parameter to my parser ...).


On Wed, May 13, 2009 at 6:00 PM, David Young <dyoung@pobox.com> wrote:

> On Wed, May 13, 2009 at 05:49:32PM -0400, Eddie Harari wrote:
> > Hello ,
> >
> >   I am sniffing packets and my nic is on monitor mode,
> >   the DLT type i get from pcap is 127 which is RADIOTAP header...
> >
> >   from what i understood byte 3 on the header contains the length of the
> > radiotap information preceding the 802.11 frame,
> >   and 2 bytes prior to byte 3 should be set to 0 , ( version, and pad ).
>
> The length field is 16 bits wide (two bytes) and little-endian.
>
> Dave
>
> --
> David Young             OJC Technologies
> dyoung@ojctech.com      Urbana, IL * (217) 278-3933
> -
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe.
>
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
[prev in list] [next in list] [prev in thread] [next in thread]