<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16830" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff><B>From:</B> winpcap-users-bounces@winpcap.org on behalf
of Gianluca Varenni [gianluca.varenni@cacetech.com]<BR><B>Sent:</B> Tuesday,
March 31, 2009 2:22 PM<BR><B>To:</B>
winpcap-users@winpcap.org<BR><B>Subject:</B> Re: [Winpcap-users] Vista monitor
mode support for 802.11<BR><BR><B>Attachments:</B> ATT00002.txt<BR>
<DIV><FONT size=2>As I said, it depends a lot on the information that you are
interested in. If you are interested in the low level details of 802.11, native
WiFi might not provide all the needed information.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>GV</FONT></DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=swzhao@gmail.com href="mailto:swzhao@gmail.com">Joshua (Shiwei)
Zhao</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=winpcap-users@winpcap.org
href="mailto:winpcap-users@winpcap.org">winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, March 31, 2009 1:47
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: [Winpcap-users] Vista
monitor mode support for 802.11</DIV>
<DIV><BR></DIV>
<DIV>Thanks a lot for your information!</DIV>
<DIV>I'm looking at Wireshark and think it could be easier for Wireshark to
catch WiFi traffic if it can work with Vista's native wifi mode.</DIV>
<DIV> </DIV>
<DIV>Thanks,</DIV>
<DIV>Joshua<BR><BR></DIV>
<DIV class=gmail_quote>2009/3/31 Gianluca Varenni <SPAN dir=ltr><<A
href="mailto:gianluca.varenni@cacetech.com">gianluca.varenni@cacetech.com</A>></SPAN><BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV bgcolor="#ffffff">
<DIV><FONT size=2>At the moment there are no current plans to support native
WiFi in WinPcap, although I've definitely been thinking about it. The main
problem in supporting it is that it's not trivial, it basically requires to
rewrite all the kernel module of WinPcap in order to be an NDIS6 filter
driver (and as consequence, a lot of the installation code). I've actually
experimented with it and read some documentation, with this
output:</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>- not all the wireless cards support the native wifi
monitor mode. vista supports both the "legacy" wireless drivers (i.e. the
ones that also work on 2000/XP) as well as native WiFi drivers. Only the
latter ones *can* support monitor mode. </FONT></DIV>
<DIV><FONT size=2>- even when they support monitor mode, I've seen native
wifi drivers that do not provide the original wireless frames. If you are
only interested in the L3 information, that's ok. But if you are interested
in the strictly wireless related information (e.g. 802.11 control/management
frames), that could be a problem. For example, I've seen 802.11n native WiFi
drivers that strip all the 802.11N related information from the
frames.</FONT></DIV>
<DIV><FONT size=2>- transmitting on adapters in monitor mode should
be possible, but not documented (and probably not supported by
MS).</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Hope this clarifies the situation.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Have a nice day</FONT></DIV>
<DIV><FONT size=2>GV</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2></FONT> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV>
<DIV></DIV>
<DIV class=h5>
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV style="BACKGROUND: #e4e4e4; FONT: 10pt arial"><B>From:</B> <A
title=swzhao@gmail.com href="mailto:swzhao@gmail.com" target=_blank>Joshua
(Shiwei) Zhao</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=winpcap-users@winpcap.org href="mailto:winpcap-users@winpcap.org"
target=_blank>winpcap-users@winpcap.org</A> </DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Monday, March 30, 2009 11:31
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> [Winpcap-users] Vista
monitor mode support for 802.11</DIV>
<DIV><BR></DIV>
<DIV>Hi,</DIV>
<DIV>I'm wondering whether winpcap plans to or already support the native
WiFi monitor mode on Vista. If so what's the status, and if not what's the
difficulty there?</DIV>
<DIV> </DIV>
<DIV>Many thanks,</DIV>
<DIV>Joshua</DIV>
<DIV> </DIV></DIV></DIV>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing list<BR><A href="mailto:Winpcap-users@winpcap.org"
target=_blank>Winpcap-users@winpcap.org</A><BR><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A><BR>
<P></P>
<P></P></BLOCKQUOTE></DIV><BR>_______________________________________________<BR>Winpcap-users
mailing list<BR><A
href="mailto:Winpcap-users@winpcap.org">Winpcap-users@winpcap.org</A><BR><A
href="https://www.winpcap.org/mailman/listinfo/winpcap-users"
target=_blank>https://www.winpcap.org/mailman/listinfo/winpcap-users</A><BR><BR></BLOCKQUOTE></DIV><BR>
<P>
<HR>
<P></P>_______________________________________________<BR>Winpcap-users
mailing
list<BR>Winpcap-users@winpcap.org<BR>https://www.winpcap.org/mailman/listinfo/winpcap-users<BR></BLOCKQUOTE></BODY></HTML>