Re: Converting raw 802.11 (rfmon) capture file to standard libpcap

From: James Golovich (james@wwnet.net)
Date: Mon Jan 12 2004 - 13:06:20 EST


On Sun, 11 Jan 2004, Jerry Shenk wrote:

> Does anybody know of a way to convert an rfmon capture file (raw 802.11)
> to standard libpcap? The goal is to use 'normal' data stream analysis
> tools to analyze a previously captured data file. One specific goal
> would be to use tcpreplay to play back an rfmon capture file over an
> Ethernet interface. It would seem that tehtereal would be able to do
> this but I haven't figured it out yet.
>

ethereal/tethereal comes with a tool that can do this called editcap.
It's been a while since I've used it but I kind of remember using it like:
editcap -T ieee-802-11 infile outfile
or
editcap -T ieee-802-11-radio infile outfile
depending on what format the capture type is

James

---------------------------------------------------------------------------
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:45 EDT