OmniPeek Support

Filter Eapol??

tekio
Posts: 1
Joined: Thu May 19, 2011 1:02 am

Filter Eapol??

Postby tekio » Thu May 19, 2011 1:14 am

I'm using a trial version of omnipeek, as well as testing other WiFi capture products out. So far, I really like Omnipeek the best.

There is one problem that bewilders me: how does it filter for specific authentication packets? I mean on all the other products, I just apply an eapol positive filter to get all the eapol auths, w/o needing to buffer a ton of superfluous data. On Wireshark, I just set a capture or display filter by typing "eapol".

I've done a little googling, and have not come across any specific instructions what-so-ever. I know I can set a capture filter for all 802.11 auth packets, but when capturing on a busy channel I just want specific eapol captured?

Thanks!

DJWP
Posts: 676
Joined: Tue Oct 30, 2007 11:42 am

RE: Filter Eapol??

Postby DJWP » Thu May 19, 2011 11:37 am

You may want to try just setting up a filter for 802.1x authentication protocol, as EAPOL packets are a subset of these. Just add a filter, click Protocol, and 802.1x is one of the listed choices. That should do it.


Return to “OmniPeek Support”

Who is online

Users browsing this forum: No registered users and 2 guests