Wireshark

  • Riverbed Technology
  • WinPcap
the world's foremost network protocol analyzer
  • Wireshark
    • About
    • Download
    • Blog
  • Get Help
    • Ask a Question
    • FAQs
    • Documentation
    • Mailing Lists
    • Online Tools
    • Wiki
    • Bug Tracker
  • Develop
    • Get Involved
    • Developer's Guide
    • Browse the Code
    • Latest Builds

Wireshark-users: [Wireshark-users] tshark to interpret wlan tags?

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next


From: George Nychis <gnychis@xxxxxxxxx>
Date: Mon, 1 Feb 2010 23:45:28 -0500

Hi all,

If I use:
tshark -n -i en0 -y IEEE802_11_RADIO -T fields -e wlan_mgt.tag.interpretation

... I keep getting "Not interpreted" for the tag field on beacon frames which definitely has an SSID which wireshark is able to interpret.

Additionally, if I use
tshark -i en0 -y IEEE802_11_RADIO -o column.format:'"Info", "%i"'

It is able to interpret the flags: Beacon frame, SN=1619, FN=0, Flags=........C, BI=100, SSID="CMU"

Does anyone know how I can use the -e option and have it interpret the flags correctly?

Thanks!
George
  • Follow-Ups:
    • Re: [Wireshark-users] tshark to interpret wlan tags?
      • From: George Nychis
  • Prev by Date: Re: [Wireshark-users] delimiting tshark with something other than whitepace?
  • Next by Date: Re: [Wireshark-users] tshark to interpret wlan tags?
  • Previous by thread: Re: [Wireshark-users] delimiting tshark with something other than whitepace?
  • Next by thread: Re: [Wireshark-users] tshark to interpret wlan tags?
  • Index(es):
    • Date
    • Thread

Wireshark and the "fin" logo are registered trademarks of the Wireshark Foundation