Hello,
I' ve a question: Can i use this wrapper to create, for example, an Wireless IDS? I want to know if jNetPCap is able to provide all functions with 802.11 frames.
Thanks.
jNetPcap is a libpcap wrapper so the same interface types are applicable here. jNetPcap has some very rudimentary RadioTap support. Libpcap can generate fake ethernet headers for WLAN interfaces which jnetpcap will then decode, but won't supply you with the low level radio information.
So, I could be able to create a WIDS that only works in layer 2. The layer 1 is not supported.
Am I right?
Thanks!
Yes and no. The best support is for the ethernet emulated WLAN but we do have some 802.11 headers in development that are no complete. The first RadioTap header is working but its not complete. There is quiet a bit of information you can get out of it, in its current state. I wouldn't recommend this for production but for testing and messing around its usable.