When using Wireshark on my MacBook, I see all my packages wrapped inside Ethernet II frames, although I'm connected wirelessly, which I already figured must be because they are translated from 802.11 somewhere along the way.
But what I wondered was, why they are translated in the first place? Are they only translated for Wireshark? Who does the translation? The NIC, or the kernel, or some OS daemon? Isn't there some information lost (I know 802.11 carries a lot more information than 802.3)?