This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Authentication packets

0

I would like to ask when I check the authentication packets, what is the meaning of Flags=.......C, when I expand the packet, I could not find where is the C Is it a carry bit? Where can I find it? Also, is it possible to have seq=0 of the authentication packet send by client?21

asked 15 Apr '16, 21:41

Kristy%20Lau's gravatar image

Kristy Lau
1111
accept rate: 0%

when I check the authentication packets,

the authentication packets of which protocol ?? Can you please provide a sample capture file and/or a screenshot?

Regards Kurt

(19 Apr '16, 06:55) Kurt Knochner ♦

One Answer:

0

This looks like an 802.11 wireless frame that you are referring to, as it is the only one I know that has that type of information in the Info field. The C refers to the checksum, if available.

Example snapshot - two wireless capture devices set to the same channel, for comparison. One passes up the FCS, the other does not:

alt text

and the body looks like this (pertinent part):

alt text

answered 20 Apr '16, 03:04

Bob%20Jones's gravatar image

Bob Jones
1.0k2515
accept rate: 21%