Wireshark-dev: [Wireshark-dev] extended radiotap parser error
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: abhinav narain <abhinavnarain10@xxxxxxxxx>
Date: Sun, 18 Nov 2012 10:10:18 -0500
hi,
 I am slapping a vendor radiotap parser in the kernel, but I see the 4 byte bitmap is not shown/displayed in the wireshark output;
I shows the EXT bit being set, but after that follows reading the 8 bytes as the timestamp, not as 4 byte vendor bitmap followed by the TSF! , suggesting the parser is not right !
Can someone explain ?
Looking at dissect_radiotap, it shows the vendor radiotap payload is maximum 6 bytes
<code>
proto_tree_add_item(ven_tree, hf_radiotap_ven_data, tvb,
                                            offset + 6, iter.this_arg_size - 6,
                                            ENC_NA);
</code>

What should I do if my payload is 12 bytes ?
Because of this .. the headers following radiotap are all messed up and I can't think how to debug

-Abhinav