tshark filter wlan.fcs.status==1 does not work with v3.0.2,
I use tshark to read packets and remove valid ones with the filter option "wlan.fcs.status == 1". However, that option does not work after installing newer Wireshark version v3.0.2. The same field does not even show up on Wireshark UI anymore. Is there a new filed option that I can use with tshark to remove FCS failed packets.
The error I see from Wireshark UI is that under the 802.11 MAC header, the FCS status is marked as "Unverified". Whereas previous versions would report "Good" or "Bad".
I found that it is tied to the default setting on Wireshark v3.0.2 with Preferences > Advances > wlan.check_checksum is set to FALSE. On previous versions, it is set to TRUE.
Is there any option to enable wlan checksum verification while reading packets using shark ?
What do you mean by "shark"? Do you mean Wireshark, TShark, or some other program?
I meant tshark (auto-correct changed it to shark). I was able to figure out the answer by using a tshark option to edit preference settings. tshark -o "wlan.check_checksum:TRUE"