 | 1 | initial version |
Most likely you have not captured the real 802.11 frames but are dealing with "fake" Ethernet frames. You can verify this by looking at the Encapsulation type listed in Wireshark's "Statistics -> Capture File Properties" page. If it says, "Ethernet", you don't have 802.11 frames, thus your filter isn't going to work.
You can read more about the real 802.11 frames vs the fake Ethernet frames on the Wi-Fi (WLAN, IEEE 802.11) wiki page, and be sure to have a look at the WLAN (IEEE 802.11) capture setup page as well.
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
