Wireshark
the world's foremost network protocol analyzer
Wireshark-users: [Wireshark-users] Weird LLC header in 802.11 data packet
From: "Omer Enbar" <omer.enbar@xxxxxxxxx>
Date: Sun, 10 Aug 2008 17:48:40 +0300
Hey.
I have pcap file with 802.11 packets. Most of them are ok, but occasionally I see a packet with a bogus LLC header.
Every such packet is obviously not really LLC as the protocols depicted in it are not commonly used.
I have read about everything I could about 802.11 and 802.2 protocols, and I wonder whether someone has any idea about it.
Attached is pcap file with the weird LLC headers.
Notice that the first two bytes of the "LLC" seem like a sequence number.
I appreciate your response.
Omer.
I have pcap file with 802.11 packets. Most of them are ok, but occasionally I see a packet with a bogus LLC header.
Every such packet is obviously not really LLC as the protocols depicted in it are not commonly used.
I have read about everything I could about 802.11 and 802.2 protocols, and I wonder whether someone has any idea about it.
Attached is pcap file with the weird LLC headers.
Notice that the first two bytes of the "LLC" seem like a sequence number.
I appreciate your response.
Omer.
Attachment:
nic.pcap
Description: Binary data
- Follow-Ups:
- Re: [Wireshark-users] Weird LLC header in 802.11 data packet
- From: Guy Harris
- Re: [Wireshark-users] Weird LLC header in 802.11 data packet
- Prev by Date: [Wireshark-users] HTTP with Kerberos / Decoding
- Next by Date: Re: [Wireshark-users] bug in sub-allocator emem.c - guard pages cause unnecessary 'out of memory' condition
- Previous by thread: [Wireshark-users] Betr: Re: Reassembly of HTTP packets
- Next by thread: Re: [Wireshark-users] Weird LLC header in 802.11 data packet
- Index(es):