CRAWDAD tools/process/pcap/Wifipcap

A simple C++ wrapper around libpcap for parsing 802.11 frames from the pcap file.

A simple C++ wrapper around libpcap that allows applications to selectively demultiplex 802.11 frames, and the most common layer 2 and layer 3 protocols contained within them. Basically, the wifipcap library handles all the parsing of 802.11 frames (and/or layer 2/3 packets) from the pcap file (or stream). wifipcap is now embedded in tcpflow, a TCP/IP session reassembler maintained by Simson Garfinkel.

Lastmodified :

2009-07-09

Dataname :

tools/process/pcap/Wifipcap

File :

wifipcap.tar.gz

Releasedate :

2008-02-01

Change :

the initial version.

References :

klasnja-wifi-privacy Tool Website

Website :

https://github.com/simsong/tcpflow

Keyword :

802.11 802.11 frames RFMON packet trace tcpdump

License :

//////////////////////////////////////////////////////////////////////////////// // Mercury and Colyseus Software Distribution // // Copyright (C) 2004-2005 Ashwin Bharambe (ashu@cs.cmu.edu) // 2004-2005 Jeffrey Pang (jeffpang@cs.cmu.edu) // 2004 Mukesh Agrawal (mukesh@cs.cmu.edu) // // This program is free software; you can redistribute it and/or // modify it under the terms of the GNU General Public License as // published by the Free Software Foundation; either version 2, or (at // your option) any later version. // // This program is distributed in the hope that it will be useful, but // WITHOUT ANY WARRANTY; without even the implied warranty of // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU // General Public License for more details. // // You should have received a copy of the GNU General Public License // along with this program; if not, write to the Free Software // Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 // USA ////////////////////////////////////////////////////////////////////////////////

Build :

- How to compile wifipcap. In Linux: Enter this directory and type: make In Windows: Open wifipcap.sln in Visual Studio and build it. You will need to have the winpcap include and library files in the appropriate search paths.

Usage :

For an overview see wifipcap.h. (1) Include the header "wifipcap.h" in your application C++ file(s). (2) Implement a subclass of WifipcapCallbacks. This class has one member function for each type of 802.11 frame and layer 2/3 packets. Each of these functions will be called as a frame/packet is parsed. (3) Create an instance of Wifipcap with either a pcap trace file or a live device to capture packets from. (4) Call Wifipcap::Run with your instance of WifipcapCallbacks. (5) Compile your program linking to libpcap and wifipcap.a. On Linux: g++ -o myprogram myprogram.c /path/to/wifipcap.a -lpcap On Windows: Link the following libraries: wpcap.lib ws2_32.lib WINMM.LIB wifipcap.lib Make sure wifipcap.lib is in the library path.

Example :

Please see sample.cpp.

Algorithm :

Most of the code is derived from tcpdump. Linux: Requires libpcap >= 0.9.4 on Linux. Windows: Requires WinPcap >= 4.0.2 and AirPcap for 802.11 capture See: http://www.cacetech.com/support/downloads.htm