Wireshark

  • Riverbed Technology
  • WinPcap
SHARKFEST '12 - Wireshark Developer and User Conference - June 24-27, 2012 - UC Berkeley, Clark Kerr Campus
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-bugs: [Wireshark-bugs] [Bug 3288] Wireshark is not filtering wireless packets based on wlan.qos.eosp filter

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Sat, 28 Feb 2009 23:35:52 -0800 (PST)

https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3288


Guy Harris <guy@xxxxxxxxxxxx> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         OS/Version|Debian                      |All
           Platform|PC                          |All
         Resolution|                            |INVALID




--- Comment #5 from Guy Harris <guy@xxxxxxxxxxxx>  2009-02-28 23:35:50 PDT ---
IEEE Std 802.11e-2005 says, in section 7.1.3.5 "QoS Control field", that frames
sent by non-AP QSTAs don't *have* an EOSP bit; instead, bit 4 of the QoS
Control field indicates whether bits 8-15 of the QoS Control field are the TXOP
Duration Requested or Queue Size.

Unless I'm missing something, frames sent by an AP would have From DS set; the
frames you're not seeing when you filter on wlan.qos.eosp don't have From DS
set, which means they don't have an EOSP bit, and therefore neither
wlan.qos.eosp == 0 nor wlan.qos.eosp == 1 are true (wlan.qos.eosp doesn't exist
in those frames, so it is neither 0 nor 1 nor any other value in that frame),
so neither of those filters should, and neither of those filters will, match
those frames.

I've checked in changes to add a "wlan.qos.bit4" field, to give the value of
bit 4 for non-AP frames, and also cleaned up the display of bits 8-15 of the
QoS field.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

  • References:
    • [Wireshark-bugs] [Bug 3288] New: Wireshark is not filtering wireless packets based on wlan.qos.eosp filter
      • From: bugzilla-daemon
  • Prev by Date: [Wireshark-bugs] [Bug 3292] New: Wireshark GUI opens in a non-existent monitor location
  • Previous by thread: [Wireshark-bugs] [Bug 3288] Wireshark is not filtering wireless packets based on wlan.qos.eosp filter
  • Next by thread: [Wireshark-bugs] [Bug 3170] New plugin to dissect collectd network packets
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation