Hi Mikael, thanks for your help. I've changed the protected bit when the packet is exported. Then I have changed the option in the dissector to "Yes - with IV". However I still can't get the ip/icmp layers dissected. What am I still missing?
On Tue, Dec 30, 2025 at 9:46 PM Mikael Kanstrup <[email protected]> wrote: > > Hi Dario, > > The frame is said to be non-protected (wlan.fc.protected == False) > making the dissector assume there's no IV following the frame header. > However there seems to be one. I got this frame properly dissected by > manually editing the pcap file setting wlan.fc.protected, then > configuring the IEEE 802.11 dissector to ignore the protection bit > with option "Yes - with IV". > > I guess we could introduce yet another protection bit ignore option > for this "inverted" case. > > /Mikael > > Den tis 30 dec. 2025 kl 16:07 skrev Dario Lombardo <[email protected]>: > > > > Hello everybody > > I have captured a wlan datagram on a dev board (raw data) and I have > > encapsulated it in an exported pdu. > > The wlan layer looks dissected fine, but the following don't. The > > captured datagram should be IP+ICMP, but there is something missing in > > between wlan and IP. > > My question is: why aren't those dissected? Is the wlan datagram > > itself missing something? > > Any guidance is appreciated. > > The capture is attached. > > Thanks. > > Dario. > > > > -- > > Naima is online. > > _______________________________________________ > > Wireshark-dev mailing list -- [email protected] > > To unsubscribe send an email to [email protected] > _______________________________________________ > Wireshark-dev mailing list -- [email protected] > To unsubscribe send an email to [email protected] -- Naima is online.
wifi-exported2.pcapng
Description: application/pcapng
_______________________________________________ Wireshark-dev mailing list -- [email protected] To unsubscribe send an email to [email protected]
