I have a capture that I want apply a display filter on to identify any
802.11 beacon frames that have the unicast cipher suite "TKIP" set.
This field is one of several tag interpretations for the same tag number
- I'm not sure how to specify this field with a display filter.
I thought something like "wlan_mgt.tag.interpretation[6:4] eq
0x0050f202" would work, but Ethereal isn't accepting it as a valid
filter. I want to be able to apply a filter to include only those
beacon frames that have support for the TKIP unicast cipher suite.
I have uploaded an excerpt of the capture file I'm working with at
http://home.jwu.edu/jwright/tag_interpretation.dump.
Any ideas?
Thanks!
-Josh
--
-Joshua Wright
jwright@xxxxxxxxxxx
http://home.jwu.edu/jwright/
pgpkey: http://home.jwu.edu/jwright/pgpkey.htm
fingerprint: FDA5 12FC F391 3740 E0AE BDB6 8FE2 FC0A D44B 4A73
200 GB hard drive: < $200. Price per bit ~0.000000001 cent.
128 bit Verisign cert: $895. Price per bit ~7 dollars.
> For installation instructions for your Secure Site Seal, go to:
> http://www.verisign.com/seal/secure/index.html
Pimping your website for Verisign: Priceless.