Wireshark · Ethereal-users: Re: [Ethereal-users] Malformed packets

[PoWah Wong <wong_powah@xxxxxxxx>]

Frame 1 (241 bytes on wire, 241 bytes captured)
    Arrival Time: Nov 30, 2005 17:06:21.999940000
    Time delta from previous packet: 0.000000000
seconds
    Time since reference or first frame: 0.000000000
seconds
    Frame Number: 1
    Packet Length: 241 bytes
    Capture Length: 241 bytes
    Protocols in frame: prism:wlan
Prism Monitoring Header
    Message Code: 68
    Message Length: 144
    Device: ath0
    Host Time: 0x771c5f5f (DID 0x10044, Status 0x0,
Length 0x4)
    MAC Time: 0xa338f52e (DID 0x20044, Status 0x0,
Length 0x4)
    Channel: 0x24 (DID 0x30044, Status 0x0, Length
0x4)
    RSSI: 0x0 (DID 0x40044, Status 0x0, Length 0x4)
    SQ: 0x0 (DID 0x0, Status 0x0, Length 0x0)
    Signal: 0x2f (DID 0x60044, Status 0x0, Length 0x4)
    Noise: 0x0 (DID 0x0, Status 0x0, Length 0x0)
    Data Rate: 6.0 Mb/s
    IsTX: 0x0 (DID 0x90044, Status 0x0, Length 0x4)
    Frame Length: 0x61 (DID 0xa0044, Status 0x0,
Length 0x4)
IEEE 802.11
    Type/Subtype: Beacon frame (8)
    Frame Control: 0x0080 (Normal)
        Version: 0
        Type: Management frame (0)
        Subtype: 8
        Flags: 0x0
            DS status: Not leaving DS or network is
operating in AD-HOC mode (To DS: 0  From DS: 0) (0x00)
            .... .0.. = More Fragments: This is the
last fragment
            .... 0... = Retry: Frame is not being
retransmitted
            ...0 .... = PWR MGT: STA will stay up
            ..0. .... = More Data: No data buffered
            .0.. .... = WEP flag: WEP is disabled
            0... .... = Order flag: Not strictly
ordered
    Duration: 0
    Destination address: ff:ff:ff:ff:ff:ff (Broadcast)
    Source address: 00:f0:00:c9:66:90
(00:f0:00:c9:66:90)
    BSS Id: 00:f0:00:c9:66:90 (00:f0:00:c9:66:90)
    Fragment number: 0
    Sequence number: 112
IEEE 802.11 wireless LAN management frame
    Fixed parameters (12 bytes)
        Timestamp: 0x000000930711F837
        Beacon Interval: 0.102400 [Seconds]
        Capability Information: 0x0011
            .... .... .... ...1 = ESS capabilities:
Transmitter is an AP
            .... .... .... ..0. = IBSS status:
Transmitter belongs to a BSS
            .... .... .... 00.. = CFP participation
capabilities: No point coordinator at AP (0x0000)
            .... .... ...1 .... = Privacy: AP/STA can
support WEP
            .... .... ..0. .... = Short Preamble:
Short preamble not allowed
            .... .... .0.. .... = PBCC: PBCC
modulation not allowed
            .... .... 0... .... = Channel Agility:
Channel agility not in use
            .... .0.. .... .... = Short Slot Time:
Short slot time not in use
            ..0. .... .... .... = DSSS-OFDM: DSSS-OFDM
modulation not allowed
    Tagged parameters (61 bytes)
        Tag Number: 0 (SSID parameter set)
        Tag length: 10
        Tag interpretation: qawcp6ess2
        Tag Number: 1 (Supported Rates)
        Tag length: 8
        Tag interpretation: Supported rates: 6.0(B)
9.0 12.0(B) 18.0 24.0(B) 36.0 48.0 54.0 [Mbit/sec]
        Tag Number: 3 (DS Parameter set)
        Tag length: 1
        Tag interpretation: Current Channel: 36
        Tag Number: 5 ((TIM) Traffic Indication Map)
        TIM length: 4
        DTIM count: 0
        DTIM period: 1
        Bitmap Control: 0x00 (mcast:0, bitmap offset
0)
        Tag Number: 221 (Vendor Specific)
        Tag length: 24
        Tag interpretation: WPA IE, type 1, version 1
        Tag interpretation: Multicast cipher suite:
TKIP
        Tag interpretation: # of unicast cipher
suites: 1
        Tag interpretation: Unicast cipher suite 1:
TKIP
        Tag interpretation: # of auth key management
suites: 1
        Tag interpretation: auth key management suite
1: WPA
        Tag interpretation: Not interpreted
        Tag Number: 168 (Reserved tag number)
        Tag length: 50
[Malformed Packet: IEEE 802.11]

-------------------------------------------------------------------

    * Subject: Re: [Ethereal-users] Malformed packets
    * From: Joerg Mayer <jmayer@xxxxxxxxx>
    * Date: Sun, 4 Dec 2005 09:51:00 +0100

On Fri, Dec 02, 2005 at 08:35:47AM -0500, PoWah Wong
wrote:
> I tried 
>  "tethereal -i ath0  -c 2 -o wlan.check_fcs:true -w
/tmp/sniff"
>  but every packet in the sniff file still  had 
>  [Malformed Packet: IEEE 802.11]
>  at the end.

Can you please post a capture with *1* frame that
shows the problem?

 Thanks
       Joerg

-- 
Joerg Mayer                                          
<jmayer@xxxxxxxxx>
We are stuck with technology when what we really want
is just stuff that
works. Some say that should read Microsoft instead of
technology.



	

	
		
__________________________________________________________ 
Find your next car at http://autos.yahoo.ca