The decapwap project

The decapwap project provides an open source software that decapsulates CAPWAP [RFC 5415] in a pcap dump format file and convert the file into another dump file with IEEE802.11 frame format.

This software is developed for researcher working on network traffic analysis. We sometimes use wireless LAN controller such as Cisco Wireless Controller 5508 to deploy large number of wireless access points. If we capture the traffic between the controller and the access points, the captured packets are encapsulated by CAPWAP. To analyze the packet trace, we need to decapsulate them. In this page, we provide a decapsulation software implementation. We note that this software had been used in Ref. [1].

[1] Hirochika Asai et al., "Towards Characterization of Wireless Traffic in Coexisting 802.11a/g and 802.11n Network," ACM CoNEXT 2010 Student Workshop, Philadelphia, USA, Nov. 30, 2010

Search from the Internet:
Custom Search

decapwap

The software (version 0.1.0) is available at decapwap-0.1.0.tar.gz.

How to use it

  1. Extract the source code and compile it 
    $ tar -zxvf decapwap-0.1.0.tar.gz
$ cd decapwap-0.1.0
$ ./configure && make
  2. Run the program 
    $ ./decapwap <capwap-input-dump-filename> <output-filename>

Tested environments

pcap analyzer

Now, we provide only source codes, available at anacap-current.tar.gz. Greater detailed explanation of this program will appear.