Ethereal-users: Re: [Ethereal-users] Filter ack

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Guy Harris <gharris@xxxxxxxxx>
Date: Tue, 28 Mar 2006 11:01:00 -0800
David López Pérez wrote:

I send an ICMP packet (ping) and I receive the the corresponding immediate acknowledgement

That's an 802.11-layer acknowlegment, not an ICMP acknowledgment.

For a display filter, I think you could filter on the frame type. I don't know what the right filter would be.

A capture filter could also be constructed, but you'd have to look at the raw bytes of the 802.11 header - the libpcap parser doesn't know about 802.11 frame types.