Re: how to set capture filters?

["Joshua (Shiwei) Zhao" <swzhao () gmail com>]

I'm trying on winxp and I'm getting 802.11 headers in monitor mode.
I'm using Wireshark GUI instead of tshark, Wireshark 1.2.2 and winpcap 4.0.2.

Thanks,
Joshua


On Tue, Jan 19, 2010 at 12:51 PM, Guy Harris <guy () alum mit edu> wrote:
> On Jan 19, 2010, at 12:45 PM, Joshua (Shiwei) Zhao wrote:
>
> > How could I set a capture filter to only capture, e.g, wlan management frames?
> > I could not find an exact answer by searching around. I tried sth like
> > 'wlan mgt' or 'type mgt' but it didn't work.
>
> On what OS is this?
>
> What's the output of "tshark -v"?
>
> Are you capturing in monitor mode?  Are you getting 802.11 headers, or just Ethernet headers?
> ___________________________________________________________________________
> Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
> Archives:    http://www.wireshark.org/lists/wireshark-dev
> Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
>             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe