Re: Capture filters for wlan

[Guy Harris <guy () alum mit edu>]

On Jul 3, 2010, at 10:56 AM, Guy Harris wrote:

> I'll look at making "wlan ra" and "wlan ta" aliases for "wlan addr1" and "wlan addr2"; that's relatively 
> straightforward.

I've checked into the libpcap main and 1.1 branches changes to implement "wlan ra" and "wlan ta"; they're not quite 
aliases (TA and RA aren't in management frames; the 802.11 spec says addr1 and addr2 are DA and SA, respectively).

When that'll appear in any OS releases depends on when the next libpcap release comes out and when it gets picked up by 
various OSes.

> (BTW, this also found a bug wherein saying "wlan addr{1,2,3,4}" on anything other than a device returning 802.11 
> headers will crash the application using libpcap/WinPcap; that bug is in all versions of libpcap/WinPcap that support 
> "wlan addr{1,2,3,4}".)

I've also checked into those branches a fix for that bug.
___________________________________________________________________________
Sent via:    Wireshark-users mailing list <wireshark-users () wireshark org>
Archives:    http://www.wireshark.org/lists/wireshark-users
Unsubscribe: https://wireshark.org/mailman/options/wireshark-users
             mailto:wireshark-users-request () wireshark org?subject=unsubscribe