Hi Dario, The frame is said to be non-protected (wlan.fc.protected == False) making the dissector assume there's no IV following the frame header. However there seems to be one. I got this frame properly dissected by manually editing the pcap file setting wlan.fc.protected, then configuring the IEEE 802.11 dissector to ignore the protection bit with option "Yes - with IV".
I guess we could introduce yet another protection bit ignore option for this "inverted" case. /Mikael Den tis 30 dec. 2025 kl 16:07 skrev Dario Lombardo <[email protected]>: > > Hello everybody > I have captured a wlan datagram on a dev board (raw data) and I have > encapsulated it in an exported pdu. > The wlan layer looks dissected fine, but the following don't. The > captured datagram should be IP+ICMP, but there is something missing in > between wlan and IP. > My question is: why aren't those dissected? Is the wlan datagram > itself missing something? > Any guidance is appreciated. > The capture is attached. > Thanks. > Dario. > > -- > Naima is online. > _______________________________________________ > Wireshark-dev mailing list -- [email protected] > To unsubscribe send an email to [email protected] _______________________________________________ Wireshark-dev mailing list -- [email protected] To unsubscribe send an email to [email protected]
