Wireshark · Wireshark-dev: Re: [Wireshark-dev] tshark and IEEE 802.11 Aggregated MPDU

[Vincent Magnin <Vincent.Magnin@xxxxxxx>]

Thank you Gerald,

That's what I am looking for.


> Wireshark doesn't support this sort of notation for filter fields.  
> However, you
> can disable A-MPDU reassembly via  
> "Edit->Preferences->Protocols->PPI->Reassemble
> fragmented 802.11 A-MPDUs". This will make each MPDU show up as a separate
> frame. You can tell which MPDUs are part of the same aggregate by using
> ppi.80211n-mac.ampdu_id (which is what Wireshark uses).


Best Regards,

Vincent Magnin