[Bro-Dev] [JIRA] (BIT-529) Support for DLT IEEE802_11_RADIO linktype

Support for DLT IEEE802_11_RADIO linktype ----------------------------------------- Key: BIT-529 URL: https://bro-tracker.atlassian.net/browse/BIT-529 Project: Bro Issue Tracker Issue Type: New Feature Components: Bro Affects Versions: git/master Reporter: gregor Assignee: Seth Hall Priority: Low Fix For: 2.5 {noformat} #!rst Add support for DLT IEEE802_11_RADIO to Bro. It appears this linktype adds a bunch of info from the WLAN radio in front of the actual ethernet header. Unfortunately, it appears to have variable length headers, to adding support to Bro is not trivial. Many (all?) wlan interface can create pcap captures with this DLT. E.g, one can use * ``tcpdump -I ....`` or * ``tcpdump -y IEEE802_11_RADIO`` (depending on OS and tcpdump version used) On my Mac OS ``tcpdump -I`` works. {noformat}