wifi - pcap: Detect the presence or absense of radiotap header -
how can detect presence or absence of radiotap data in raw bytes of pcap file? not using libpcap rather examining payload myself. seems me can create new file tcpdump includes feature if i'm given file may or may not have feature impossible determine whether raw bytes include or not. thing occurs me looking difference in number of bytes in incl_len , orig_len in pcap data.
by checking link-layer header type in pcap file header; if it's 127, have radiotap headers followed 802.11 headers.
the link-layer header type in pcap file header (and link-layer header type in interface description block in pcap-ng file) has value that's 1 of values given in the tcpdump.org list of link-layer header type values.
Comments
Post a Comment