tcpdump mailing list archives
Re: 802.11 frame control
From: Guy Harris <guy () alum mit edu>
Date: Mon, 28 Nov 2011 12:36:26 -0800
On Nov 13, 2011, at 1:00 PM, Ibrahim wrote:
According to the IEEE Std 802.11-2007 it's : - 2 bits version - 2 bits type - 4 bits sub type - 8 bits for 8 flags when I was comparing my result to wireshark , I noticed the following problem fc is 0x0080 as unsigned short int and on wireshark data stream packet it's 80 00 no problem but wireshark dissect it as follows version 0 type 0 subtype 8 flags are all 0s so it was used as 0x0800 is this correct and if yes why the left bytes is inverted ?
See the answer to the StackOverflow version of the question:
http://stackoverflow.com/questions/8111182/c-pcap-802-11-header
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- 802.11 frame control Ibrahim (Nov 27)
- Re: 802.11 frame control Guy Harris (Nov 29)
