Wireshark-bugs: [Wireshark-bugs] [Bug 2556] patch to support WSA, WSMP, WRSS packets
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 07 Mar 2013 04:29:56 +0000

Comment # 24 on bug 2556 from 
(In reply to comment #21)
> Hi,
> If I get the length of the element right there is 4 "extra" bytes at the end
> of the packet:
> 0000   f2 a4 ee 61
> 
> This causes most packets to come up as "malformed" what is these bytes?

FCS.  Sometimes (perhaps it goes with monitor mode) the captured packets
include the FCS.  Radiotap has a flag bit to indicate whether the FCS is
present (although I've seen one capture where it appears that it should have
been set for at least some frames, but wasn't); the AVS and Prism headers,
however, do not, and this capture has Prism headers.  Manually setting the
802.11 preference to assume all packets have FCS seems to fix that for most
frames.

You are receiving this mail because:
  • You are watching all bug changes.