Home page logo

pen-test logo Penetration Testing mailing list archives

Re: Converting raw 802.11 (rfmon) capture file to standard libpcap
From: James Golovich <james () wwnet net>
Date: Mon, 12 Jan 2004 13:06:20 -0500 (EST)

On Sun, 11 Jan 2004, Jerry Shenk wrote:

Does anybody know of a way to convert an rfmon capture file (raw 802.11)
to standard libpcap?  The goal is to use 'normal' data stream analysis
tools to analyze a previously captured data file.  One specific goal
would be to use tcpreplay to play back an rfmon capture file over an
Ethernet interface.  It would seem that tehtereal would be able to do
this but I haven't figured it out yet.

ethereal/tethereal comes with a tool that can do this called editcap.
It's been a while since I've used it but I kind of remember using it like:
editcap -T ieee-802-11 infile outfile
editcap -T ieee-802-11-radio infile outfile
depending on what format the capture type is



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]