Re: How to configure ethereal to capture MAC frames on HostAP ?

From: Jouni Malinen (
Date: 2002-07-18 13:41:54 UTC

On Thu, Jul 18, 2002 at 03:03:44PM +0530, Manjunathan PY wrote:

> I am not able to see beacons/association frames in ethereal. It just
> displays "unknown" in the Protocol column, and "WTAP_ENCAP" in the Info
> column of ethereal console.

Which versions of Ethereal and libpcap are you using? This sounds a bit like one or both were too old (i.e., do not have support for ARPHRD_IEEE80211).
> I want to see the MAC frames in ethereal, is it possible?

Sure it is possible, you just need to use newer versions. I downloaded today's CVS snapshot of both libpcap (from and Ethereal and they compiled without any problems (remember to set libpcap directory to match with the installation directory of the CVS version) and are able to show 802.11 headers for the packets.

Jouni Malinen                                            PGP id EFC895FA

This archive was generated by hypermail 2.1.4.