Re: How Wireshark supports monitor mode for WLAN 802.11 adapter in Windows?

[Guy Harris <guy () alum mit edu>]

On Dec 30, 2015, at 12:14 PM, Guy Harris <guy () alum mit edu> wrote:

> On Dec 29, 2015, at 11:29 PM, Yang Luo <hsluoyb () gmail com> wrote:
>
> > I changed this function to always returning 1, which means "supported". I know here I should check whether the 
> > adapter supports the monitor mode, but I found no way to check. All I can do is to get/set the current mode using 
> > the OID way above.
>
> That might be the only way

Or not.

The OID_DOT11_OPERATION_MODE_CAPABILITY OID:

        https://msdn.microsoft.com/en-us/library/windows/hardware/ff569396(v=vs.85).aspx

returns a structure with a uOpModeCapability field; the adapter supports it if and only if the 
DOT11_OPERATION_MODE_NETWORK_MONITOR flag bit is set in that field.  So you'll have to open the device in order to get 
that OID, but it'll at least tell you whether the device supports it.  If the OID isn't supported, or if it is but 
DOT11_OPERATION_MODE_NETWORK_MONITOR isn't set, the device doesn't support monitor mode, otherwise it does.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe