Comment # 24
on bug 2556
from Guy Harris
(In reply to comment #21)
> Hi,
> If I get the length of the element right there is 4 "extra" bytes at the end
> of the packet:
> 0000 f2 a4 ee 61
>
> This causes most packets to come up as "malformed" what is these bytes?
FCS. Sometimes (perhaps it goes with monitor mode) the captured packets
include the FCS. Radiotap has a flag bit to indicate whether the FCS is
present (although I've seen one capture where it appears that it should have
been set for at least some frames, but wasn't); the AVS and Prism headers,
however, do not, and this capture has Prism headers. Manually setting the
802.11 preference to assume all packets have FCS seems to fix that for most
frames.
You are receiving this mail because:
- You are watching all bug changes.