I added limited radiotap layer (Wi-Fi) support to packetbeat, so that I am able to receive for example beacons, probes, etc... But when I am enabling other protocols (http, dns, ...) in yml file, no management frames are received any more only data frames. Does someone have an idea where could be the issue? By disabling protocols in yml file, management frames are processed again.
packetbeat is generating some bpf filter on startup. Might this cause your problems?
1 Like
Didn't think of it. This solved my problem. Thank you.