RE: Converting raw 802.11 (rfmon) capture file to standard libpcap

From: Chris Eagle (cseagle@redshift.com)
Date: Mon Jan 12 2004 - 19:13:46 EST


Jerry Shenk wrote:
>
> Does anybody know of a way to convert an rfmon capture file (raw 802.11)
> to standard libpcap? The goal is to use 'normal' data stream analysis
> tools to analyze a previously captured data file. One specific goal
> would be to use tcpreplay to play back an rfmon capture file over an
> Ethernet interface. It would seem that tehtereal would be able to do
> this but I haven't figured it out yet.
>

Raw as generated by what means? There must be some delimiter for each packet
so it is trivial to read each each packet and slap a pcap header struct on
the front before writing the packet out to a pcap compatible file (one to
which you have already written a pcap file header). Once complete, load it
into ethereal and analyze.

Chris

---------------------------------------------------------------------------
----------------------------------------------------------------------------



This archive was generated by hypermail 2.1.7 : Sat Apr 12 2008 - 10:53:45 EDT