On Friday 21 November 2008 21:22:41 Bob Copeland wrote: > # tcpdump -s 1000 -w assoc.cap -i wlan1 > > Then you can load assoc.cap into wireshark (you can capture > from inside wireshark too if you prefer). Or dump tcpdump completely, because you can make a dump from the commandline with text-based wireshark "tshark": tshark -s 1000 -i wlan1 -w assoc.cap (However, I usually omit the -s 1000 when using tshark) -- To unsubscribe from this list: send the line "unsubscribe linux-wireless" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html