NetStumber is a stumbler, not a sniffer. It doesn't capture packets, it only
Neither NetStumbler nor Ethereal work very well on XP, at least not with
vendor's drivers for wireless NICs. So, if you're using the XP version,
don't count on much. I plan to set this stuff up on a Linux laptop when I
get the time.
Ethereal runs over a packet capture library called Winpcap that has to be
able to put your NIC in promiscuous mode to see "raw" network data - that
is, all packets on the net. Winpcap is not able to do this with the NDIS
drivers for many wifi cards on XP. If you start an Ethereal capture dialog,
disable "promiscuous", and it will capture the local TCP/IP traffic from the
NDIS driver only. It will look like Ethernet traffic, but that's only
because the NDIS driver makes it look that way. You can't see the 802.11
frames at all.
NetStumbler appears to work, but it's really pretty broken. Go to
www.netstumbler.org and read the FAQs. Also read the readme that comes with
the XP NetStumbler install. It lists a bunch of wifi NICs that it does *not*
support. These include my D-Link adapter. NetStumbler sometimes seems to
work for me, other times fails completely. The FAQ indicates that the actual
SNR measurement it gives is not trustworthy on XP.
"han" <nl> wrote in message