New Tool: wlan2eth

Wednesday, January 28, 2009

 

Wlan2eth is a simple tool to convert packet captures in 802.11 format to Ethernet format.  Lots of tools can only understand Ethernet link types, so I wrote this tool to convert captures to a format that they can understand.


For each packet in an input 802.11 capture file, wlan2eth examines header values to ensure it is a data frame, then it creates a new output packet with an appropriate Ethernet header (source and destination address and embedded protocol field are preserved from the 802.11/802.2 header).  Timestamps are also preserved from the original capture.


This tool is really only useful for encrypted traffic, though you could use it with a tool such as airdecap-ng to decrypt an encrypted capture first, then convert the unencrypted output file to Ethernet format.


The source is available here; simply run "make" to build the source.  Requires libpcap.


Usage:


$ ./wlan2eth input.pcap output.pcap


Wlan2eth will tell you how many frames were converted to Ethernet format.


Comments/Questions/Concerns?  Contact me.  Thanks!  -Josh

 
 
next
../2/3_Decrypting_DebIan-Vulnerable_SSH_Traffic.html
 
4_Syringe_Probes.html
previous