http://anonsvn.wireshark.org/viewvc/viewvc.cgi?view=rev&revision=45609
User: guy
Date: 2012/10/16 06:23 PM
Log:
The first 4 bytes of the Prism header are, apparently, a "message code",
and it apparently either has the value 0x00000044 or 0x00000041. If
those bytes aren't the magic number for an AVS header and aren't one of
those "message code" values, assume there's no Prism header, just an
802.11 frame - that fixes at least one capture where some packets have
AVS radio headers and other packets have no radio header.
Note that this might also let us handle big-endian Prism headers (see
which byte order the message code is in, and assume everything else is
in the same byte order).
Display the message code in hex, not decimal.
Directory: /trunk/epan/dissectors/
Changes Path Action
+89 -66 packet-ieee80211-prism.c Modified