]
Johanna Amann updated BIT-529:
------------------------------
Resolution: No longer applies
Status: Closed (was: Open)
Superseded by BIT-1526
Support for DLT IEEE802_11_RADIO linktype
-----------------------------------------
Key: BIT-529
URL:
https://bro-tracker.atlassian.net/browse/BIT-529
Project: Bro Issue Tracker
Issue Type: New Feature
Components: Bro
Affects Versions: git/master
Reporter: gregor
Assignee: Seth Hall
Priority: Low
Fix For: 2.5
{noformat}
#!rst
Add support for DLT IEEE802_11_RADIO to Bro. It appears this linktype adds a bunch of
info from the WLAN radio in front of the actual ethernet header. Unfortunately, it appears
to have variable length headers, to adding support to Bro is not trivial.
Many (all?) wlan interface can create pcap captures with this DLT. E.g, one can use
* ``tcpdump -I ....`` or
* ``tcpdump -y IEEE802_11_RADIO`` (depending on OS and tcpdump version used)
On my Mac OS ``tcpdump -I`` works.
{noformat}