Ask Your Question

Avidan's profile - activity

2022-05-15 06:15:37 +0000 marked best answer Extracting mesh fields from 802.11 QoS control

I'm using wireshark to dissect captured data. The captured data comes as a byte stream.

Wireshark seems to always open up the QoS control field as follows:

      "wlan.qos": "0x00000187",
      "wlan.qos_tree": {
        "wlan.qos.tid": "7",
        "wlan.qos.priority": "7",
        "wlan.qos.eosp": "0",
        "wlan.qos.ack": "0x00000000",
        "wlan.qos.amsdupresent": "1",
        "wlan.qos.ps_buf_state": "0x00000001",
        "wlan.qos.ps_buf_state_tree": {
          "wlan.qos.buf_state_indicated": "0"
        }
      },

However in 802.11 standard, it says that if traffic comes from a mesh station, bits 8-15 are opened differently. How can I tell wireshark that the traffic is coming from a mesh station? should this be a part of my capture file somehow?

2022-05-15 06:15:36 +0000 received badge  Scholar (source)
2022-05-11 10:12:51 +0000 commented answer Extracting mesh fields from 802.11 QoS control

Thanks a lot for this answer - a very good lead. Wish I could upvote it. let me check if I can make forward progress usi

2022-05-11 10:11:27 +0000 commented answer Extracting mesh fields from 802.11 QoS control

BTW. I see that the wireshark sample captures page has a mesh.pcap file here: https://wiki.wireshark.org/uploads/__moin_

2022-05-10 12:53:23 +0000 asked a question Extracting mesh fields from 802.11 QoS control

Extracting mesh fields from 802.11 QoS control I'm using wireshark to dissect captured data. The captured data comes as