Why is the wlan_radio.duration field not always shown?
Hello,
why is the wlan_radio.duration
not shown in the first packet of the trace example?
Wireshark_QA copy.pcapng
BTW: Linkname and filename of the capture are different. Filename was automatically given by Wireshark Q&A
Update:
Build Info:
3.4.5 (v3.4.5-0-g7db1feb42ce9)
Compiled (64-bit) with Qt 5.12.6, with libpcap, without POSIX capabilities, with
GLib 2.58.3, with zlib 1.2.11, with SMI 0.4.8, with c-ares 1.15.0, with Lua
5.2.4, with GnuTLS 3.6.15 and PKCS #11 support, with Gcrypt 1.8.7, with MIT
Kerberos, with MaxMind DB resolver, with nghttp2 1.39.2, with brotli, with LZ4,
with Zstandard, with Snappy, with libxml2 2.9.9, with QtMultimedia, with
automatic updates using Sparkle, with SpeexDSP (using system library), with
Minizip.
Running on Mac OS X 10.15.7, build 19H1030 (Darwin 19.6.0), with Intel(R)
Core(TM) i7-8700B CPU @ 3.20GHz (with SSE4.2), with 32768 MB of physical memory,
with locale C, with dark display mode, without HiDPI, with libpcap version
1.9.1, with GnuTLS 3.6.15, with Gcrypt 1.8.7, with brotli 1.0.9, with zlib
1.2.11, binary plugins supported (21 loaded).
Built using clang 4.2.1 Compatible Apple LLVM 11.0.0 (clang-1100.0.33.16).
BR Christian
In what version of Wireshark is it now shown? It shows up in the 3.4.5 release version.
@Guy Harris I have updated the question with the build info. Has it maybe something to do with 802.11n or 802.11ac?
That's the same version I'm running.
Given that, as I said, I'm also running the macOS 3.4.5 build, and am seeing the wlan.duration field in both packets, it has nothing to do with either of them; if it had something to do with that, it'd affect all machines running that version of 3.4.5, and probably all machines running (unmodified) 3.4.5 on all platforms.
I.e., if I open up the "Frame Control Field", the first frame has "Duration: 48 microseconds" and the second frame has "Duration: 0 microseconds".
Note, however, that the name of the file you linked to is 16223064006424996.pcapng, NOT Wireshark_QA copy.pcapng. Are they the same file, or did you upload the wrong file?