Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Most likely you have not captured the real 802.11 frames but are dealing with "fake" Ethernet frames. You can verify this by looking at the Encapsulation type listed in Wireshark's "Statistics -> Capture File Properties" page. If it says, "Ethernet", you don't have 802.11 frames, thus your filter isn't going to work.

You can read more about the real 802.11 frames vs the fake Ethernet frames on the Wi-Fi (WLAN, IEEE 802.11) wiki page, and be sure to have a look at the WLAN (IEEE 802.11) capture setup page as well.