Re: [Ethereal-users] Capture media page online

[Guy Harris <gharris@xxxxxxxxx>]

On Mon, Sep 02, 2002 at 06:11:38PM -0500, Justin C. Walker wrote:
> Updates:
>    802.11 is indeed cooked only

OK, that's what the current table says.

>    Serial (PPP) is cooked only

"Cooked only" in what sense?  Do you get the PPP header (with or without
an HDLC-like-encapsulation header)?  Do you get control-protocol
packets?  (The other BSDs should, I think, give you all packets,
including control protocols, at least with the kernel PPP
implementation.)

> Agreed.  Support for "raw" access for 802.11 is a function of the drive 
> (and the card, I suppose).  For Airport, the driver is closed-source, so 
> it depends on what Apple decides to do.

I may try to pester Jordan Hubbard about that.  (It might also make the
Wildpackets people happy, assuming that they use BPF for the MacOS X
EtherPeek and plan to do an AiroPeek for MacOS X and use BPF for that as
well.)