On Nov 13, 2011, at 1:00 PM, Ibrahim wrote:
> According to the IEEE Std 802.11-2007
> it's :
> - 2 bits version
> - 2 bits type
> - 4 bits sub type
> - 8 bits for 8 flags
> when I was comparing my result to wireshark , I noticed the following problem
> fc is 0x0080 as unsigned short int
> and on wireshark data stream packet it's 80 00
> no problem but wireshark dissect it as follows
> version 0
> type 0
> subtype 8
> flags are all 0s
> so it was used as 0x0800
> is this correct and if yes why the left bytes is inverted ?
See the answer to the StackOverflow version of the question:
http://stackoverflow.com/questions/8111182/c-pcap-802-11-header
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.
