Ethereal-users: Re: [Ethereal-users] Filter ack

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

Date Index Thread Index Other Months All Mailing Lists
Date Prev Date Next Thread Prev Thread Next
From: David López Pérez <dalopezperez@xxxxxxxxxxx>
Date: Tue, 28 Mar 2006 19:50:14 +0000
Ok

Thank you
I think I going to filter these frames with the help of the lenght of the frame 
These frame have a lenght of 10b

I'll use --> frame.pkt_len == 10

This is not the best way but it's effective for me

Thank you again



From: Guy Harris <gharris@xxxxxxxxx>
Reply-To: Ethereal user support <ethereal-users@xxxxxxxxxxxx>
To: Ethereal user support <ethereal-users@xxxxxxxxxxxx>
Subject: Re: [Ethereal-users] Filter ack
Date: Tue, 28 Mar 2006 11:01:00 -0800

David López Pérez wrote:
I send an ICMP packet (ping) and I receive the the corresponding immediate acknowledgement 

That's an 802.11-layer acknowlegment, not an ICMP acknowledgment.
For a display filter, I think you could filter on the frame type. I don't know what the right filter would be.
A capture filter could also be constructed, but you'd have to look at the raw bytes of the 802.11 header - the libpcap parser doesn't know about 802.11 frame types. 
_______________________________________________
Ethereal-users mailing list
Ethereal-users@xxxxxxxxxxxx
http://www.ethereal.com/mailman/listinfo/ethereal-users