Hi Dario,
The frame is said to be non-protected (wlan.fc.protected == False)
making the dissector assume there's no IV following the frame header.
However there seems to be one. I got this frame properly dissected by
manually editing the pcap file setting wlan.fc.protected, then
configuring the IEEE 802.11 dissector to ignore the protection bit
with option "Yes - with IV".
I guess we could introduce yet another protection bit ignore option
for this "inverted" case.
/Mikael
Den tis 30 dec. 2025 kl 16:07 skrev Dario Lombardo <lomato@xxxxxxxxx>:
>
> Hello everybody
> I have captured a wlan datagram on a dev board (raw data) and I have
> encapsulated it in an exported pdu.
> The wlan layer looks dissected fine, but the following don't. The
> captured datagram should be IP+ICMP, but there is something missing in
> between wlan and IP.
> My question is: why aren't those dissected? Is the wlan datagram
> itself missing something?
> Any guidance is appreciated.
> The capture is attached.
> Thanks.
> Dario.
>
> --
> Naima is online.
> _______________________________________________
> Wireshark-dev mailing list -- wireshark-dev@xxxxxxxxxxxxx
> To unsubscribe send an email to wireshark-dev-leave@xxxxxxxxxxxxx