Riverbed Cascade Pilot Personal Edition: Take Wireshark to the Next Level - Advanced Triggers and Alerts; Web and VoIP Analytics; Long-Term Trending and Forensics; Deep Packet Analysis with Wireshark

Wireshark-users: [Wireshark-users] madwifi Fast Frame dissector for tshark?

Date Index Thread Index Other Months All Mailing Lists

Date Prev Date Next Thread Prev Thread Next

From: Marianna Carrera <marianna.carrera@xxxxxxxxx>
Date: Tue, 4 Aug 2009 16:11:10 +0200

Are you aware of any dissector for Madwifi Fast Frames for tshark/wireshark?
Madwifi Fast Frame are 802.11 frame, which carry several ethernet frames. Or in other words, is a kind of layer-2 tunnelling.

You regognize them cause their LLC protocol id is 0x88bd, they have big payloads, like 3000bytes, and tshark does not decode further than the llc header.

Thanks in advance,

--

Marianna

Prev by Date: Re: [Wireshark-users] Can't Change Time Display Format (Sake Blok)
Next by Date: Re: [Wireshark-users] Value too large for defined data type
Previous by thread: Re: [Wireshark-users] Can't Change Time Display Format (Sake Blok)
Next by thread: [Wireshark-users] find local IP from cap-file
Index(es):
- Date
- Thread