tcpdump mailing list archives

Re: 802.11 frame control


From: Guy Harris <guy () alum mit edu>
Date: Mon, 28 Nov 2011 12:36:26 -0800


On Nov 13, 2011, at 1:00 PM, Ibrahim wrote:

According to the IEEE Std 802.11-2007
it's :
   - 2 bits version
   - 2 bits type
   - 4 bits sub type
   - 8 bits for 8 flags
when I was comparing my result to wireshark , I noticed the following problem
fc is  0x0080 as unsigned short int
and on wireshark data stream packet it's 80 00
no problem but  wireshark dissect it  as follows
version 0
type 0
subtype 8
flags  are all 0s
so it was used as 0x0800
is this correct and if yes why the left bytes is inverted ?

See the answer to the StackOverflow version of the question:

        http://stackoverflow.com/questions/8111182/c-pcap-802-11-header

-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: