Wireshark-bugs: [Wireshark-bugs] [Bug 3288] New: Wireshark is not filtering wireless packets bas

Date: Thu, 26 Feb 2009 16:54:06 -0800 (PST)
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=3288

           Summary: Wireshark is not filtering wireless packets based on
                    wlan.qos.eosp filter
           Product: Wireshark
           Version: 1.0.5
          Platform: PC
        OS/Version: Debian
            Status: NEW
          Severity: Critical
          Priority: High
         Component: Wireshark
        AssignedTo: wireshark-bugs@xxxxxxxxxxxxx
        ReportedBy: cduba@xxxxxxxxx


Build Information:
on 1.0.5

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.8.20, with GLib 2.12.4, with libpcap 0.9.5, with libz
1.2.3, without POSIX capabilities, without libpcre, without SMI, without ADNS,
without Lua, without GnuTLS, without Gcrypt, without Kerberos, without
PortAudio, without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.22, with libpcap version 0.9.5.

Built using gcc 4.1.2 20061115 (prerelease) (Debian 4.1.1-21).

Wireshark is Open Source Software released under the GNU General Public
License.

Check the man page and http://www.wireshark.org for more information.

wireshark 1.0.5

Copyright 1998-2008 Gerald Combs <gerald@xxxxxxxxxxxxx> and contributors.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.

Compiled with GTK+ 2.8.20, with GLib 2.12.4, with libpcap 0.9.5, with libz
1.2.3, without POSIX capabilities, without libpcre, without SMI, without ADNS,
without Lua, without GnuTLS, without Gcrypt, without Kerberos, without
PortAudio, without AirPcap.
NOTE: this build doesn't support the "matches" operator for Wireshark filter
syntax.

Running on Linux 2.6.22, with libpcap version 0.9.5.

Built using gcc 4.1.2 20061115 (prerelease) (Debian 4.1.1-21).

--
I couldnot able to filter wireless 802.11 qos packets based on wlan.qos.eosp
filter. When i use the following filter option in wireshark 

"wlan.qos.eosp == 1"

it is only showing only NULL frames but not showing any data packets that has
this flag equals to 1

when i use 

"wlan.qos.eosp == 0"

It is only showing ICMP and some NULL packets and not showing any data packets.

The data packets are UDP packets.


-- 
Configure bugmail: https://bugs.wireshark.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.