Re: Capture filters for wlan

[Guy Harris <guy () alum mit edu>]

On Jul 2, 2010, at 1:34 PM, G Capps wrote:

> > > Unfortunately, there aren't libpcap capture filters for the TA and RA.
> > > Time for me to dive into libpcap's grammar.y/gencode.c again, to add TA and RA filters....
>
> I was afraid there might not be any.  But are you suggesting that they
> may be available in a future revision?

I'm saying that libpcap should probably be enhanced to support more filters for 802.11 MAC addresses; if somebody 
implements them in a future libpcap release, they'll be available in future versions of {at least some Linux 
distributions, *BSDs that bother to pick up that version of libpcap, Mac OS X if it picks up that version of libpcap, 
WinPcap, etc.}.

On UN*X, libpcap isn't part of Wireshark, so a future Wireshark revision won't make a difference; you'd have to install 
an updated version of libpcap yourseflf.  On Windows, Wireshark is packaged with WinPcap, so if a future WinPcap is 
based on a future libpcap with those additional filters, some future Wireshark release would probably be packaged with 
that future WinPcap (and you might be able to install it on your system yourself.

I wouldn't expect it to happen soon, however; libpcap, like Wireshark, is free software, so it's up to somebody who has 
enough Copious Free Time(TM) to work on it.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe