Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

tshark filter wlan.fcs.status==1 does not work with v3.0.2,

I use tshark to read packets and remove valid ones with the filter option "wlan.fcs.status == 1". However, that option does not work after installing newer Wireshark version v3.0.2. The same field does not even show up on Wireshark UI anymore. Is there a new filed option that I can use with tshark to remove FCS failed packets.

tshark filter wlan.fcs.status==1 does not work with v3.0.2,

I use tshark to read packets and remove valid ones with the filter option "wlan.fcs.status == 1". However, that option does not work after installing newer Wireshark version v3.0.2. The same field does not even show up on Wireshark UI anymore. Is there a new filed option that I can use with tshark to remove FCS failed packets.

The error I see from Wireshark UI is that under the 802.11 MAC header, the FCS status is marked as "Unverified". Whereas previous versions would report "Good" or "Bad".