11-14-2013 01:54 PM
Can someone confirm for me that Radiotap headers (including channel/datarate/rssi) are universally not included in the raw capture when doing a remote packet capture?
I've confirmed with an AM > Wireshark remote capture, but wanted to see if someone could confirm that other combinations of Capture software/radio modes resulted in this data not being encapsulated as well.
Can it be?
11-14-2013 08:15 PM
I don't recall seeing that information in any AM packet captures.
For collecting the radiotap headers I'll use Microsoft netmon or a combination of AirPcap and Eye PA.
If a reply adequately addresses your issue, please click on the "Accept as Solution" and "Give Kudos" button so this information can benefit other users.
11-15-2013 06:39 AM
Being able to put an AM into channel scanning mode for a packet capture is beneficial in certain circumstances. Not knowing which packets came on which channel in wireshark makes the valute of the capture limiting.