On Thu, Apr 23, 2015 at 12:05:55AM +0200, Daniel Borkmann wrote:
> On 04/22/2015 11:50 PM, Vadim Kochan wrote:
> ...
> >I think that "HT Capabilities" element info should be showed in more
> >structured view so
> >it will be more readable what do you think ?
> >
> >Does someone have a better option ?
>
> Yes, I'm fine with that.
>
> --
> You received this message because you are subscribed to the Google Groups
> "netsniff-ng" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to [email protected].
> For more options, visit https://groups.google.com/d/optout.
OK, I have some working output example:
[ Radiotap Version (0), Length (26), Flags (0x0000482f) ]
[ 802.11 Frame Control (0x0040)]
[ Proto Version (0), Type (0, Management), Duration (0),
Destination (ff:ff:ff:ff:ff:ff)
Source (9c:4e:36:a5:38:98) => (Intel Corporate:a5:38:98)
BSSID (ff:ff:ff:ff:ff:ff)
Fragmentnr. (0), Seqnr. (1980). Subtype (4, Probe Request) ]
[ Subtype Probe Request:
Info Elements:
SSID (0, Len (8)): blizzard
Supp. Rates (1, Len (8)): 1 2 5.5 11 6 9 12 18
Ext Support Rates (50, Len(4)): 24 36 48 54
HT Capabilities (45, Len(26)):
Info:
LDCP Cod Cap (0)
Supp Ch Width Set (0)
SM Pwr Save(0)
HT-Greenfield (1)
Short GI for 20/40 MHz (1/0)
Tx/Rx STBC (0/1)
HT-Delayed Block Ack (0)
Max A-MSDU Len (1)
DSSS/CCK Mode in 40 MHz (0)
Res (0x0)
Forty MHz Intol (0)
L-SIG TXOP Protection Supp (0)
A-MPDU Params:
Max Len Exp (0)
Min Start Spacing (2)
Res (0x7)
Supp MCS Set:
Rx MCS Bitmask (0xffff00000000)
Res (0x0)
Rx High Supp Data Rate (0)
Res (0x0)
Tx MCS Set Def (0)
Tx Rx MCS Set Not Eq (0)
Tx Max Number Spat Str Supp (0)
Tx Uneq Mod Supp (0)
Res (0x0)
Ext Cap:
PCO (0)
PCO Trans Time (0)
Res (0x0)
MCS Feedb (0)
+HTC Supp (0)
RD Resp (0)
Res (0x0)
Transm Beamf:
Impl Transm Beamf Rec Cap (0)
Rec/Transm Stagg Sound Cap (0/0)
Rec/Trans NDP Cap (0/0)
Impl Transm Beamf Cap (0)
Cal (0)
Expl CSI Transm Beamf Cap (0)
Expl Noncmpr/Compr Steering Cap (0/0)
Expl Trans Beamf CSI Feedb (0)
Expl Noncmpr/Cmpr Feedb Cap (0/0)
Min Grpg (0)
CSI Num Beamf Ant Supp (0)
Noncmpr/Cmpr Steering Nr Beamf Ant Supp (0/0)
CSI Max Nr Rows Beamf Supp (0)
Ch Estim Cap (0)
Res (0x0)
ASEL:
Ant Select Cap (0)
Expl CSI Feedb Based Transm ASEL Cap (0)
Ant Indic Feedb Based Transm ASEL Cap (0)
Expl CSI Feedb Cap (0)
Ant Indic Feedb Cap (0)
Rec ASEL Cap (0)
Transm Sound PPDUs Cap (0)
Res (0x0)
Reserved (21, Len (110)): Failed to dissect Subtype ]
May be it would be good to add '(' and ')' around information elements
to visually separate them ?
[ Subtype Probe Request:
Info Elements:
(SSID (0, Len (8)): blizzard),
(Supp. Rates (1, Len (8)): 1 2 5.5 11 6 9 12 18),
(Ext Support Rates (50, Len(4)): 24 36 48 54),
(HT Capabilities (45, Len(26)):
Info:
LDCP Cod Cap (0)
Supp Ch Width Set (0)
SM Pwr Save(0)
HT-Greenfield (1)
Short GI for 20/40 MHz (1/0)
Tx/Rx STBC (0/1)
HT-Delayed Block Ack (0)
Max A-MSDU Len (1)
DSSS/CCK Mode in 40 MHz (0)
Res (0x0)
Forty MHz Intol (0)
L-SIG TXOP Protection Supp (0)
A-MPDU Params:
Max Len Exp (0)
Min Start Spacing (2)
Res (0x7)
Supp MCS Set:
Rx MCS Bitmask (0xffff00000000)
Res (0x0)
Rx High Supp Data Rate (0)
Res (0x0)
Tx MCS Set Def (0)
Tx Rx MCS Set Not Eq (0)
Tx Max Number Spat Str Supp (0)
Tx Uneq Mod Supp (0)
Res (0x0)
Ext Cap:
PCO (0)
PCO Trans Time (0)
Res (0x0)
MCS Feedb (0)
+HTC Supp (0)
RD Resp (0)
Res (0x0)
Transm Beamf:
Impl Transm Beamf Rec Cap (0)
Rec/Transm Stagg Sound Cap (0/0)
Rec/Trans NDP Cap (0/0)
Impl Transm Beamf Cap (0)
Cal (0)
Expl CSI Transm Beamf Cap (0)
Expl Noncmpr/Compr Steering Cap (0/0)
Expl Trans Beamf CSI Feedb (0)
Expl Noncmpr/Cmpr Feedb Cap (0/0)
Min Grpg (0)
CSI Num Beamf Ant Supp (0)
Noncmpr/Cmpr Steering Nr Beamf Ant Supp (0/0)
CSI Max Nr Rows Beamf Supp (0)
Ch Estim Cap (0)
Res (0x0)
ASEL:
Ant Select Cap (0)
Expl CSI Feedb Based Transm ASEL Cap (0)
Ant Indic Feedb Based Transm ASEL Cap (0)
Expl CSI Feedb Cap (0)
Ant Indic Feedb Cap (0)
Rec ASEL Cap (0)
Transm Sound PPDUs Cap (0)
Res (0x0)),
(Some next element ...),
Reserved (21, Len (110)): Failed to dissect Subtype ]
So in that way the next information element after "HT Capabilities" will
be easy identified by having "),"
Regards,
--
You received this message because you are subscribed to the Google Groups
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
For more options, visit https://groups.google.com/d/optout.
