Re: Get "Malformed Packet" for 802.11 Beacon frames on Windows

[Guy Harris <guy () alum mit edu>]

On Apr 11, 2016, at 10:53 PM, Yang Luo <hsluoyb () gmail com> wrote:

> I'm not an expert of 802.11 protocols, so can anyone point out what's wrong here?

Frame 40 has an FCS, but the "FCS at end" flag in the Flags field of the radiotap header is 0, and Wireshark thus 
doesn't think it has an FCS at the end, and thinks it has an extra 4 bytes of payload.

Try, by default, turning that flag *on*, and then see if any packets that don't have a valid FCS don't have an FCS at 
all, rather than having an invalid FCS.
___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev () wireshark org>
Archives:    https://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-request () wireshark org?subject=unsubscribe