Wireshark-bugs: [Wireshark-bugs] [Bug 5796] New: [PATCH] Add Atheros vendor specific 802.11 IE p
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: bugzilla-daemon@xxxxxxxxxxxxx
Date: Thu, 31 Mar 2011 23:49:25 -0700 (PDT)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=5796

           Summary: [PATCH] Add Atheros vendor specific 802.11 IE parsing
           Product: Wireshark
           Version: SVN
          Platform: Other
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: Low
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: ryazanov.s.a@xxxxxxxxx


Build Information:
wireshark 1.5.1 (SVN Rev 36428 from /trunk)

Compiled (32-bit) with GTK+ 2.20.1, with GLib 2.24.2, with libpcap 1.1.1, with
libz 1.2.3, with POSIX capabilities (Linux), without libpcre, without SMI,
without c-ares, without ADNS, without Lua, without Python, with GnuTLS 2.10.4,
with Gcrypt 1.4.6, without Kerberos, without GeoIP, without PortAudio, without
AirPcap.

Running on Linux 2.6.36-gentoo-r5-2, with libpcap version 1.1.1, with libz
1.2.3, GnuTLS 2.10.4, Gcrypt 1.4.6.

Built using gcc 4.4.4.
--
This patch add Atheros (vendor specific) information element parsing support
for 802.11 management frames (beacons, etc.). Parse Atheros Advanced Capability
and Atheros eXtended Range information elements.
I've used latest madwifi trunk (rev 4136) for reference (file
net80211/ieee80211.h) and wireless packet generation.

Capture files which demonstrates parser features:
atheros-ie-beacon-norm.pcap.gz - no Atheros IE (for reference);
atheros-ie-beacon-turbo.pcap.gz - turbo support enable (AdvCap IE);
atheros-ie-beacon-burst.pcap.gz - bursting support enable (AdvCap IE);
atheros-ie-beacon-ff.pcap.gz - fast frame support enable (AdvCap IE);
atheros-ie-beacon-xr.pcap.gz - eXtended Range enabled (AdvCap & XR IE);
atheros-ie-beacon-turbo-ff-burst.pcap.gz - turbo && ff && burst at the same
time (AdvCap IE).

Patch was tested with fuzz-test.sh:
$ ./tools/fuzz-test.sh /tmp/wireshark-atheros-ie/atheros-ie-beacon-*.pcap
...
Starting pass 33789:
    /tmp/wireshark-atheros-ie/atheros-ie-beacon-burst.pcap:  OK
    /tmp/wireshark-atheros-ie/atheros-ie-beacon-ff.pcap:  OK
    /tmp/wireshark-atheros-ie/atheros-ie-beacon-norm.pcap:  OK
    /tmp/wireshark-atheros-ie/atheros-ie-beacon-turbo-ff-burst.pcap:  OK
    /tmp/wireshark-atheros-ie/atheros-ie-beacon-turbo.pcap:  OK
    /tmp/wireshark-atheros-ie/atheros-ie-beacon-xr.pcap:  OK

-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.