wifi - pcap: Detect the presence or absense of radiotap header -


how can detect presence or absence of radiotap data in raw bytes of pcap file? not using libpcap rather examining payload myself. seems me can create new file tcpdump includes feature if i'm given file may or may not have feature impossible determine whether raw bytes include or not. thing occurs me looking difference in number of bytes in incl_len , orig_len in pcap data.

by checking link-layer header type in pcap file header; if it's 127, have radiotap headers followed 802.11 headers.

the link-layer header type in pcap file header (and link-layer header type in interface description block in pcap-ng file) has value that's 1 of values given in the tcpdump.org list of link-layer header type values.


Comments

Popular posts from this blog

How to remove text and logo OR add Overflow on Android ActionBar using AppCompat on API 8? -

html - How to style widget with post count different than without post count -

url rewriting - How to redirect a http POST with urlrewritefilter -