Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I am wondering if it is possible to extract 802.11 frames on a router running OpenWrt operating as an access point. I tried using tcpdump and loading the dumped packets in Wireshark, but I could only see up to the 'Ethernet II' header.

Thanks

share|improve this question
add comment

1 Answer

Why not just use Wireshark? And from my experience you need to be in monitor mode. You will know it's working when you see probes, beacons and the like. Try a /ifconfig wlan0 down or whatever your wireless interface is ifconfig wlan0 mode monitor and then bring it back up. Hopefully you don't need to patch your drivers for this to work.

share|improve this answer
    
The tool is not the concern here -- the problem is actually getting the 802.11 header itself. There is some information in the header I wish to inspect from the 802.11 header on the router that is acting as an access point. (In particular, a couple of combinations of frame control bits). If I match these bits, I wish to forward or save the packet. In monitor mode, I can see the 802.11 header of a packet heading for another AP, but I want the router to play a dual role -- It is both an AP and forwarding certain packets heading towards it. –  user1981811 Jan 16 '13 at 14:52
    
I don't want to just dump links here, but check this out wiki.wireshark.org/CaptureSetup/… There may be information here for you to help with your problem. –  Bryan Jan 16 '13 at 14:58
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.