Ethereal-users: [Ethereal-users] Display filtering on wlan_mgt.tag.interpretation?

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: Joshua Wright <jwright@xxxxxxxxxxx>
Date: Wed, 11 Aug 2004 17:39:21 -0400
I have a capture that I want apply a display filter on to identify any 802.11 beacon frames that have the unicast cipher suite "TKIP" set. This field is one of several tag interpretations for the same tag number - I'm not sure how to specify this field with a display filter.
I thought something like "wlan_mgt.tag.interpretation[6:4] eq 0x0050f202" would work, but Ethereal isn't accepting it as a valid filter. I want to be able to apply a filter to include only those beacon frames that have support for the TKIP unicast cipher suite.
I have uploaded an excerpt of the capture file I'm working with at http://home.jwu.edu/jwright/tag_interpretation.dump. 

Any ideas?

Thanks!

-Josh
--
-Joshua Wright
jwright@xxxxxxxxxxx
http://home.jwu.edu/jwright/

pgpkey: http://home.jwu.edu/jwright/pgpkey.htm
fingerprint: FDA5 12FC F391 3740 E0AE BDB6 8FE2 FC0A D44B 4A73

200 GB hard drive: < $200.  Price per bit ~0.000000001 cent.
128 bit Verisign cert: $895.  Price per bit ~7 dollars.
> For installation instructions for your Secure Site Seal, go to:
> http://www.verisign.com/seal/secure/index.html
Pimping your website for Verisign: Priceless.