Content-Type: multipart/alternative; boundary="----_=_NextPart_002_01C8C031.D5AA3BB4" ------_=_NextPart_002_01C8C031.D5AA3BB4 Content-Type: text/plain; charset="gb2312" content-transfer-encoding: quoted-printable Hello, Ok, so there are really two things =A1=B0radio frames=A1=B1 can refer to. First, there are the pre-headers attached by various wlan cards when they ar= e in monitor mode. MadWIFI has this option. You can select the type of pre= -header by sending the card a specific command. In the file I attached, the= se are =A1=B0radiotap=A1=B1 headers. They contain information on the radio= signal not normally generated. They are attached at the start of each pack= et. One field of note is the MAC Timestamp which shows a timestamp in micro= seconds, but is not relevant to anything in particular. The other =A1=B0radio frame=A1=B1 is the IEEE 801.11 data. On a capture on an Ethernet network, there is a similar header, but it has l= ess fields. Some wireless captures do not contain this 802.11 data, as the= extra fields have been striped. I hope that helps. (Others, feel free to correct me if I=A1=AFm not accurat= e in my descriptions) Rob MacKenzie Advanced Connectivity Developer ________________________________ From: =BF=AA=B2=CA=BA=EC [mailto:caihong.kai@gmail.com] Sent: May 27, 2008 3:33 AM To: Rob MacKenzie Subject: Big thanks for you Dear Rob, Thank you very much for you recommendation of wiresharp. I have installed th= em and begin to collect data. For analysis part, I wonder what is the exact meaning of "raw 'radio' frames= ". Does it mean the frame arriving at a certain wireless card without furthe= r information, such as crc, the destination, etc? Do appreciate your kind assistance and look forward to hearing from you soon= . Kai caihong 2008-05-27 ---------------------------------------------------------------------=0A= This transmission (including any attachments) may contain confidential infor= mation, privileged material (including material protected by the solicitor-c= lient or other applicable privileges), or constitute non-public information.= Any use of this information by anyone other than the intended recipient is= prohibited. If you have received this transmission in error, please immedia= tely reply to the sender and delete this information from your system. Use,= dissemination, distribution, or reproduction of this transmission by uninte= nded recipients is not authorized and may be unlawful. ------_=_NextPart_002_01C8C031.D5AA3BB4 Content-Type: text/html; charset="gb2312" content-transfer-encoding: quoted-printable

Hello,

 

Ok, so there are really two things =A1= =B0radio frames=A1=B1 can refer to.

 

First, there are the pre-headers attach= ed by various wlan cards when they are in monitor mode.  MadWIFI has this option.  You can select the type of pre-header by sending the card a specific command.  In the file I attached, these are =A1=B0radiotap=A1= =B1 headers.  They contain information on the radio signal not normally generated.  T= hey are attached at the start of each packet.  One field of note is the MAC Timestamp which shows a timestamp in microseconds, but is not relevant to anything in particular.

 

The other =A1=B0radio frame=A1=B1 is th= e IEEE 801.11 data.

 

On a capture on an Ethernet network, th= ere is a similar header, but it has less fields.  Some wireless captures do not contain this 802.11 data, as the extra fields have been striped.

 

I hope that helps.  (Others, feel free to correct me if I=A1=AFm not accurate in my descriptions)

 

 

Rob MacKenzie
Adv= anced Connectivity Developer


From:<= /font> =BF=AA=B2=CA=BA=EC [mailto:caihong.kai@gmail.com]
Sent: May 27, 2008 3:33 AM To: Rob MacKenzie
Subject: Big thanks for you

 

 

 

Dear Rob,

 

 

Thank you very much for you recommendation of wiresharp. I have installed them and begin to collect data.

 

 

For analysis part, I wonder what is the exact meaning of "raw 'radio' frames". Does it mean the frame arriving at a certain wireless card without further information, such as crc, the destination, etc?

 

 

Do appreciate your kind assistance and look forward to hearing from= you soon.

 

 

Kai caihong

 

2008-05-27

---------------------------------------------------------------------
= =0A= This transmission (including any attachments) may contain confidential infor= mation, privileged material (including material protected by the solicitor-c= lient or other applicable privileges), or constitute non-public information.= Any use of this information by anyone other than the intended recipient is= prohibited. If you have received this transmission in error, please immedia= tely reply to the sender and delete this information from your system. Use,= dissemination, distribution, or reproduction of this transmission by uninte= nded recipients is not authorized and may be unlawful. ------_=_NextPart_002_01C8C031.D5AA3BB4--