Malformed 802.11 packets in Monitor Mode
Nobody has claimed this yet.
- Dominant language
- C
- Stars
- 3.6k
- Forks
- 592
- PR merge metrics
- No merged PRs in 30d
Description
I'm getting all malformed packets when I do
tshark -i 3 -I -w C:\pcaps\capture.pcapng
Same when I run Wireshark and enable the monitor mode in the WiFi Adapter interface.
My system is:
- My PC is an Acer Aspire F5-573G with Windows 10 home
- Adapter Alfa Network AWUS036NH
- Npcap 0.97: during installation, enabled the option to capture monitor mode
- NDIS driver as in here
- uninstalled WinPcap 4.1.3 its DLLs (wpcap.dll, Packet.dll) C:\WINDOWS\System32 (and also C:\WINDOWS\SysWOW64 for 32-bit apps).
- run wireshark as Administrator
This is how all the captures look:
Has anyone tried this successfully?
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the capture with the provided tshark command and compare it with the Wireshark monitor-mode capture on Windows 10 using the Alfa AWUS036NH adapter. The issue names no source file or test; done would require identifying why the 802.11 packets are marked malformed and documenting a successful capture setup or a reproducible cause.
Written by the indexing model from the issue text.
Assessment
- Domain
- networking, operating-systems
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100