How can I get the actual encryption type sent in Beacons from tcpdump? I have searched the manpage entry, Google, and website for tcpdump and pcap to no avail. I have the snaplen set to the highest value and the type = IEEE802_11_RADIO
and can see a LOT of data from tcpdump -i mon0 -vvv -le 'wlan type mgt subtype beacon'
and even without specifying the frame type as mgmt. I am using the latest stable version: 4.3.0 with libpcap 1.1.1
All the string says is "PRIVACY" if encryption is being used.