Ask Your Question
0

FILS Request Parameter Decode

asked 2023-10-08 19:47:40 +0000

mrncciew gravatar image

updated 2023-10-08 19:51:58 +0000

The current version (4.0.10 or 4.1 dev) of Wireshark does not decode FILS request parameter. Is that possible to add that support? Sample capture available in the below post https://mrncciew.com/2023/09/27/6ghz-...

Ext Tag: FILS Request Parameters: Undecoded Tag Number: Element ID Extension (255) Ext Tag length: 2 Ext Tag Number: FILS Request Parameters (2) Ext Tag Data: 00ff [Expert Info (Note/Undecoded): Dissector for 802.11 Extension Tag (FILS Request Parameters) code not implemented, Contact Wireshark developers if you want this supported]

edit retag flag offensive close merge delete

Comments

The missing entries are for 0000 and 00ff. Any idea what those tags are?

No.     Time        Source           Destination    Protocol    Ext Tag Data    Info
1114    05:18:29    IntelCor_65:27:14   Broadcast   802.11  0000    Probe Request, SN=1220, FN=0, Flags=........C, SSID=80
14479   05:18:50    IntelCor_65:27:14   Broadcast   802.11  0000    Probe Request, SN=1221, FN=0, Flags=........C, SSID=Wildcard (Broadcast)
14491   05:18:50    IntelCor_65:27:14   Broadcast   802.11  0000    Probe Request, SN=1222, FN=0, Flags=........C, SSID=Wildcard (Broadcast)
16941   05:18:56    ee:86:75:21:60:6a   Broadcast   802.11  00ff    Probe Request, SN=2477, FN=0, Flags=........C, SSID="mrn-psk"
16942   05:18:56    ee:86:75:21:60:6a   Broadcast   802.11  00ff    Probe Request, SN=2478, FN=0, Flags=........C, SSID="mrn-psk"
Chuckc gravatar imageChuckc ( 2023-10-08 20:50:37 +0000 )edit

According to the IEEE 802.11 standard (9.4.2.177), frame format of FILS Request Parameter Element is as below.

Element ID [1 Octet], Length [1 Octet], Element ID Extension [1 Octet], Parameter Control Bitmap [1 Octet], Max Channel Time [1 Octet], FILS Criteria [0 or 1 Octet], Max Delay Limit [0 or 1 Octet], Minimum Data Rate [0 or 3 Octet], RCPI Limit [0 or 1 Octet], OUI Response Criteria [0 or 2Octet]

mrncciew gravatar imagemrncciew ( 2023-10-09 06:06:45 +0000 )edit
add a comment

1 Answer

Sort by ยป oldest newest most voted
0

answered 2023-10-09 06:46:59 +0000

Jaap gravatar image

The way to file such requests is to create an enhancement issue at the Wireshark GitLab project. You seem to have all the information that is needed for anyone to pick it up and create a merge request with the required code changes, if anyone is so inclined.

edit flag offensive delete link more

Comments

19386: 802.11 FILS Request Parameter is not decoded by Wireshark

Chuckc gravatar imageChuckc ( 2023-10-09 10:17:26 +0000 )edit
add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

subscribe to rss feed

Stats

Asked: 2023-10-08 19:47:40 +0000

Seen: 316 times

Last updated: Oct 09 '23