From: Jouni Malinen (jkmaline_at_cc.hut.fi)
Date: 2002-07-18 13:41:54 UTC
On Thu, Jul 18, 2002 at 03:03:44PM +0530, Manjunathan PY wrote:
> I am not able to see beacons/association frames in ethereal. It just
> displays "unknown" in the Protocol column, and "WTAP_ENCAP" in the Info
> column of ethereal console.
Which versions of Ethereal and libpcap are you using? This sounds a bit
like one or both were too old (i.e., do not have support for
ARPHRD_IEEE80211).
> I want to see the MAC frames in ethereal, is it possible?
Sure it is possible, you just need to use newer versions. I downloaded today's CVS snapshot of both libpcap (from www.tcpdump.org) and Ethereal and they compiled without any problems (remember to set libpcap directory to match with the installation directory of the CVS version) and are able to show 802.11 headers for the packets.
-- Jouni Malinen PGP id EFC895FA