Wireshark-users: [Wireshark-users] madwifi Fast Frame dissector for tshark?
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Marianna Carrera <marianna.carrera@xxxxxxxxx>
Date: Tue, 4 Aug 2009 16:11:10 +0200
Are you aware of any dissector for Madwifi Fast Frames for tshark/wireshark?
Madwifi Fast Frame are 802.11 frame, which carry several ethernet frames. Or in other words, is a kind of layer-2 tunnelling.

You regognize them cause their LLC protocol id is 0x88bd, they have big payloads, like 3000bytes, and tshark does not decode further than the llc header.

Thanks in advance,


--
Marianna