Wireshark-users: Re: [Wireshark-users] Capture filters for wlan

From: G Capps <vkcapps@xxxxxxxxx>
Date: Mon, 5 Jul 2010 09:43:55 -0600
Thank you, Guy!

>> On Jul 3, 2010, at 10:56 AM, Guy Harris wrote:
>>
>> > I'll look at making "wlan ra" and "wlan ta" aliases for "wlan addr1"
>> and "wlan addr2"; that's relatively straightforward.
>>
>> I've checked into the libpcap main and 1.1 branches changes to
>> implement "wlan ra" and "wlan ta"; they're not quite aliases (TA and
>> RA aren't in management frames; the 802.11 spec says addr1 and
>> addr2 are DA and SA, respectively).
>>
>> When that'll appear in any OS releases depends on when the next
>> libpcap release comes out and when it gets picked up by various
>> OSes.
>>
>> > (BTW, this also found a bug wherein saying "wlan addr{1,2,3,4}" on
>> anything other than a device returning 802.11 headers will crash the
>> application using libpcap/WinPcap; that bug is in all versions of
>> libpcap/WinPcap that support "wlan addr{1,2,3,4}".)
>>
>> I've also checked into those branches a fix for that bug.