[Winpcap-users] Can't capture 802.11 management frame

Wei Gao wgao at broadcom.com
Tue Jun 23 11:31:36 PDT 2009

Hi Guy,

Thank you for the confirmation.



-----Original Message-----
From: winpcap-users-bounces at winpcap.org [mailto:winpcap-users-bounces at winpcap.org] On Behalf Of Guy Harris
Sent: Friday, June 19, 2009 6:57 PM
To: winpcap-users at winpcap.org
Subject: Re: [Winpcap-users] Can't capture 802.11 management frame

On Jun 19, 2009, at 4:40 PM, Wei Gao wrote:

> Thank you very much for the tips. We are running on Vista and  
> Windows 7, so there is always native wi-fi support. It looks like we  
> can not get management or control frame via winpcap on Vista/Win7.  
> Could you or somebody confirm? I found an email discussion from  
> Gianluca as attached. Is that what you refer to?

Yes, that's what I'm referring to.  As Gianluca said:

	At the moment there are no current plans to support native WiFi in  
WinPcap, although I've definitely been thinking about it. The main  
problem in supporting it is that it's not trivial, it basically  
requires to rewrite all the kernel module of WinPcap in order to be an  
NDIS6 filter driver (and as consequence, a lot of the installation  

> I follow your link and track down the following information as in  
> the below link. Is that exactly how Native Wi-Fi supports this?
> http://msdn.microsoft.com/en-us/library/aa503317.aspx

That's *part* of it.  However, it says:

	Note  It is only valid for the miniport driver to enable the  
NDIS_PACKET_TYPE_802_11_PROMISCUOUS_CTRL packet filters if the driver  
is operating in Network Monitor (NetMon) mode. For more information  
about this mode, see Network Monitor Operation Mode.

so you also have to enable monitor mode, which is what


is about.
Winpcap-users mailing list
Winpcap-users at winpcap.org

More information about the Winpcap-users mailing list