How to set intel centrino advanced-n 6205 in "monitor mode" in Windows 7 (32bit) and Wireshark

Question

I want to search elements in a xml that sub string of file is not matched with any pattern and then remove the element from the root.

1. I want to know there is other approach to search whether the sub string of full path is matched with one of patterns or not.

2. I want to know how to remove the match item from the root.

Could you let me get some advice.

Here is my sample script

if __name__ == '__main__':

    root = ElementTree()
    root.parse('errors.xml')
    patterns = ['/cm-audio/src/main/', '/reprogram-manager/']
    for error in errors:
        file = error.find('file').text
        bMatch = False
        for p in patterns :
            if p in file :
                bMattch = True
                break
        if bMatch == False :
            root.remove(error) #it doesn't work.

Solution

Monitor mode is not supported by WinPcap, and thus not by Wireshark or TShark, on Windows. It is supported, for at least some interfaces, on some versions of Linux, FreeBSD, NetBSD, OpenBSD, DragonFly BSD, and Mac OS X.

If you are running Wireshark 1.4 or later on a *BSD, Linux, or Mac OS X system, and it's built with libpcap 1.0 or later, for interfaces that support monitor mode, there will be a "Monitor mode" checkbox in the Capture Options window in Wireshark, and a command line -I to dumpcap, TShark, and Wireshark.

In Wireshark (Supported OS), if the "Monitor mode" checkbox is not grayed out, check that check box to capture in monitor mode. If it is grayed out, libpcap does not think the adapter supports monitor mode. If it is not an 802.11 adapter, it cannot support monitor mode; if it is an 802.11 adapter, either the adapter does not support monitor mode, the adapter's driver does not support monitor mode, or there's a bug in libpcap causing it not to think the adapter and driver support monitor mode.

Source of Information

Most cards are Not supported for monitor mode and Windows

Chipsets/Cards that support monitor mode or have hacked drivers that allow it Atheros seems to be one of the favorites on that page for Windows.

These older wireless adapters are considered some of the best, but may be hard to come by or have legacy hardware connections you PC does not support (ie. pcmcia slot).

Some wireless adapters are better suited to sniffing packets than others. Not all adapters can properly detect and report errors and others have drivers that are not very suited to packet sniffing. Cisco Aironet cards, Prism II cards, and Orinaco Silver and Gold cards are considered the best cards to perform monitoring from, but they are only a few of many that have the capability and the proper drivers available. Research which cards are available for the operating system to be used and procedures necessary for their driver install before purchasing any card.