[joe@xxxxxxxx (Joe Tomasone)]

The Frame Control FROM DS and TO DS fields are reversed from the
802.11 specification.  This causes the Source, Destination, BSSID,
and Wireless DS addresses to be interpreted incorrectly.

This bug exists in both the current .18 (tested on Windows) and
the current anon CVS tree (tested under Redhat).   Oddly enough,
there is a second bug in .18 in which the Source and BSSID
addresses are backwards even if the TO DS and FROM DS
fields were correct.



2. The Destination, BSS ID, and Source Address fields are mixed up.
The mix-up is different depending on the version (platform?) and the
type of data in the packet.


Feel free to reference the attached cap file.  Ignore the 0xb0b5 frames, they
are from a protocol we developed to replace WEP.  Also, ignore the AP
"SE-LAB" at MAC 00:40:05:DF:24:B8.


The players:

     AP: Lucent, MAC: 00:60:1D:F2:9B:18;  SSID: "telos".

     Client: Cabletron NIC;  MAC: 00:E0:63:50:B5:04;  IP: 38.218.28.133

      Server: Windows PC on the wired LAN;  MAC: 00:50:FC:05:BC:93;  IP: 
38.218.28.17


Packets 42 and 49 are good references.

	- Joe

Attachment: ether.cap
Description: Binary data