Hi Guy,
Thanks a lot! I must admit that your help has greatly saved my efforts.
As you have said in a previous post:
provide a radiotap Flags field with 0x10 set if the frame includes the FCS (you'll probably have to experiment a bit to see whether you get the FCS or not - the answer might differ for data and management frames, based on Network Monitor's behavior) and with 0x40 set if DOT11_RECV_FLAG_RAW_PACKET_FCS_FAILURE is set in uReceiveFlags;
So the question is how to determine if the 802.11 packet has FCS or not?
In that capture file, I found that only Beacon (like Frame 40) and Reassociation Response (like Frame 47) packets have the "Malformed Packet" error ( I guest Reassociation Response is the same error?).
But I don't think determination based on whether the packet is Beacon or Reassociation Response is good. Because maybe for another wireless adapter, this behavior might change. And it's inappropriate for Npcap to parse the contents of a packet so deep.
Cheers,
Yang
