Huge thanks to our Platinum Members Endace and LiveAction,
and our Silver Member Veeam, for supporting the Wireshark Foundation and project.

Wireshark-bugs: [Wireshark-bugs] [Bug 10139] Wireshark PEEKREMOTE decoding packets from Cisco Sn

Date: Wed, 28 May 2014 18:37:38 +0000

changed bug 10139

What Removed Added
Status UNCONFIRMED CONFIRMED
Ever confirmed   1

Comment # 5 on bug 10139 from
Yup, it's happening.

For some reason, the PEEKREMOTE dissector is calling the "wlan_datapad"
dissector rather than the "wlan" dissector for the payload. The "wlan_datapad"
dissector was created to handle some Atheros hardware that, when running in
monitor mode, stuck padding in between the 802.11 header and the payload,
presumably to align the payload on a 4-byte boundary.  Radiotap includes a flag
to indicate that this is happening, so that the dissector can skip over the
padding.

Unless that padding is present in the packets that the APs are sending over the
wire, the boring old "wlan" dissector, not the "wlan_datapad" dissector, should
be called.


You are receiving this mail because:
  • You are watching all bug changes.