comment on

Try this. It's a little better, but needs some work:-)

#!/usr/bin/perl 

use strict;
use warnings;
use Net::Pcap;
use NetPacket::Ethernet;
use NetPacket::IP;
use NetPacket::TCP;

my $err;
my $type = 'DLT_IEEE802_11';
my $dev  = Net::Pcap::lookupdev( \$err );
if ( defined $err ) {
    die "Unable to determine network device for monitoring - ", $err;
}

my ( $addr, $net, $mask );
if ( Net::Pcap::lookupnet( $dev, \$net, \$mask, \$err ) ) {
    die "Unable to look up device information for ", $dev, " - ", $err
+;
}
print STDOUT "${dev}: addr/mask -> $addr/$mask\n";

my $WiFiobject = Net::Pcap::open_live( $dev, 2048, 1, -1, \$err );
my $w802 = Net::Pcap::datalink($type);
Net::Pcap::set_datalink( $WiFiobject, $w802 );
unless ( defined $WiFiobject ) {
    die 'Unable to create packet capture on device ', $dev, ' - ', $er
+r;
}
die 'Unable to perform packet capture'
  unless Net::Pcap::loop( $WiFiobject, -1, \&syn_packets, '' );
Net::Pcap::close($WiFiobject);

sub syn_packets {
    my ( $user_data, $header, $packet ) = @_;
    my $macaddr = NetPacket::Ethernet->decode($packet);
    print "$macaddr->{'src_mac'},  $macaddr->{'dest_mac'}\n";

}
[download]

Update: Making some progress. This is better still. I added Net::Pcap::FindDevice


#!/usr/bin/perl 

use strict;
use warnings;
use Data::Dumper;
use Net::Pcap;
use Net::Pcap::FindDevice;
use NetPacket::Ethernet;
use NetPacket::IP;
use NetPacket::TCP;

my $err;
my $type = 'DLT_IEEE802_11';
my $dev  = find_device($ARGV[0]);
my ( $addr, $net, $mask );
if ( Net::Pcap::lookupnet( $dev, \$net, \$mask, \$err ) ) {
    die "Unable to look up device information for ", $dev, " - ", $err
+;
}
print STDOUT "${dev}: addr/mask -> $addr/$mask\n";

my $WiFiobject = Net::Pcap::open_live( $dev, 128000, -1, 500, \$err );
my $w802 = Net::Pcap::datalink_name_to_val($type);
Net::Pcap::set_datalink( $WiFiobject, $w802 );
unless ( defined $WiFiobject ) {
    die 'Unable to create packet capture on device ', $dev, ' - ', $er
+r;
}
die 'Unable to perform packet capture'
  unless Net::Pcap::loop( $WiFiobject, -1, \&syn_packets, '' );
print Dumper ($WiFiobject);

Net::Pcap::close($WiFiobject);

sub syn_packets {
    my ( $user_data, $header, $packet ) = @_;
    my $macaddr = NetPacket::Ethernet->decode($packet);
    print "$macaddr->{'src_mac'},  $macaddr->{'dest_mac'}\n";

}
[download]

In reply to Re^5: Net::Pcap with wireless by Khen1950fx
in thread Net::Pcap with wireless by trevelyn

Are you posting in the right place? Check out Where do I post X? to know for sure.
Posts may use any of the Perl Monks Approved HTML tags. Currently these include the following:
<code> <a> <b> <big> <blockquote> <br /> <dd> <dl> <dt> <em> <font> <h1> <h2> <h3> <h4> <h5> <h6> <hr /> <i> <li> <nbsp> <ol> <p> <small> <strike> <strong> <sub> <sup> <table> <td> <th> <tr> <tt> <u> <ul>
Snippets of code should be wrapped in <code> tags not <pre> tags. In fact, <pre> tags should generally be avoided. If they must be used, extreme care should be taken to ensure that their contents do not have long lines (<70 chars), in order to prevent horizontal scrolling (and possible janitor intervention).
Want more info? How to link or How to display code and escape characters are good places to start.


"be consistent"
	PerlMonks