Wireshark-users: Re: [Wireshark-users] Capture filters for wlan
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Guy Harris <guy@xxxxxxxxxxxx>
Date: Sat, 3 Jul 2010 13:20:06 -0700
On Jul 3, 2010, at 10:56 AM, Guy Harris wrote:

> I'll look at making "wlan ra" and "wlan ta" aliases for "wlan addr1" and "wlan addr2"; that's relatively straightforward.

I've checked into the libpcap main and 1.1 branches changes to implement "wlan ra" and "wlan ta"; they're not quite aliases (TA and RA aren't in management frames; the 802.11 spec says addr1 and addr2 are DA and SA, respectively).

When that'll appear in any OS releases depends on when the next libpcap release comes out and when it gets picked up by various OSes.

> (BTW, this also found a bug wherein saying "wlan addr{1,2,3,4}" on anything other than a device returning 802.11 headers will crash the application using libpcap/WinPcap; that bug is in all versions of libpcap/WinPcap that support "wlan addr{1,2,3,4}".)

I've also checked into those branches a fix for that bug.