Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Ethereal-users: Re: [Ethereal-users] text2pcap and WLAN frames

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date: Tue, 14 Jun 2005 16:39:24 +0200
try either:
0000 50 20 0C C0 14 E3 01 00 00 00 FF FF FF FF FF FF
0010 00 D0 61 85 C3 02 00 D0 61 85 C3 02 0B 04 C9 4E
0020 1C 5E AA 00 00 00 26 00 84 00 00 10 86 4E AE 46
0030 86 B4 86 0E 80 20 41 21 D0 68 C0 80 80 4C 10 30
0040 48 18 24 0C 12 06 36 54 80 40 E0 60 AA CA 04 80
0050 D0 D8 04 80 70 D5 D0 00 D0 61 40 80 00 80 50 00
0060 D0 D0 A0 20 00 80 00 00 19 92 6F AF

or, probably easier:

00000 50 20 0C C0 14 E3 01 00 00 00 FF FF FF FF FF FF 00 D0 61 85 C3
02 00 D0 61 85 C3 02 0B 04 C9 4E 1C 5E AA 00 00 00 26 00 84 00 00 10
86 4E AE 46 86 B4 86 0E 80 20 41 21 D0 68 C0 80 80 4C 10 30 48 18 24
0C 12 06 36 54 80 40 E0 60 AA CA 04 80 D0 D8 04 80 70 D5 D0 00 D0 61
40 80 00 80 50 00 D0 D0 A0 20 00 80 00 00 19 92 6F AF
(all the bytes in a single line starting with at least three zeroes)

what you were doing was creating a packet like
0000 ?? 00 1C 86 48 D0 D0 D0 A0 20 00 80 00 00 19 92 6F AF
 which is:
 place the bytes of line 1 at offset 1
 place the bytes of line 2 at offset 2
 place the bytes of line 3 at offset 3
 place the bytes of line 4 at offset 4
 place the bytes of line 5 at offset 5
 place the bytes of line 6 at offset 6
 place the bytes of line 7 at offset 7

On 6/14/05, ahren baillargeon <hummus@xxxxxxxxx> wrote:
> I have some hex for WLAN frames. This includes radio PLCP header as
> well as PLCP preamble.
> 
> I've tried using text2pcap with -l 127 and 163, but i always get "0
> packets read, 0 packets written"
> 
> i tried this both with and without PLCP preamble(sync+SFD), which i
> figure is probably not included.
> 
> Is there a formatting or some other issue? below is the simplest form
> of a frame which i tried:
> 
> 
> 
> 
> i also tried flipping endieness just to make sure, but nothing gives
> me a valid frame
> 
> if someone could even just send back an example text file in some
> other format and the text2pcap options used it would probably be
> helpful.
> 
> 
> sorry if this is a repeat, but i couldnt find any resources and i've
> been looking at the rfmon and some other links for a while now....
> 
> 
> 
> thanks
> 
> -aaron
> 
> _______________________________________________
> Ethereal-users mailing list
> Ethereal-users@xxxxxxxxxxxx
> http://www.ethereal.com/mailman/listinfo/ethereal-users
> 


-- 
This information is top security. When you have read it, destroy yourself.
-- Marshall McLuhan