This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Can’t display RSSI values in Wireshark

0

Hello everybody,

I am trying to analyze the up-link Wireless traffic generated by my Sony Ericsson phone and captured by my D-Link router, on which I installed the DD-WRT firmware. To do this, first I log in the router and enable the prism0 interface by typing the command:

wl -i eth1 monitor 1

and then I start to capture the packets by typing:

tcpdump -i prism0 ether src xx:xx:xx:xx:xx:xx -s0 -w /tmp/smbshare/sony_ericsson_test.pcap

where xx:xx:xx:xx:xx:xx is the MAC address of my Sony Ericsson phone. After a while I transfer the sony_ericsson_test.pcap file to my computer and open it with Wireshark program. In order to display the RSSI values I follow this procedure: Edit -> Preferences... -> Columns -> Press "Add" button -> As "Field type" I choose "IEEE 802.11 RSSI" and finally I choose name "Power" and click on "Apply" button. The problem is that the column "Power" is empty with no RSSI values.

Does Anyone has a clue on why are RSSI values not displayed? Maybe I am missing a passage.

Looking forward to hearing from anyone of you!

Thanks in advance for your help!

asked 04 Oct '12, 01:46

Giovanni%20Soldi's gravatar image

Giovanni Soldi
6335
accept rate: 0%

Does anyone can help? I am completely stuck and out of ideas!

Thanks a lot!

(04 Oct '12, 03:55) Giovanni Soldi
1

with tshark you can use a combination of -T -e options to display various field names. heres the link to my video, if it helps. http://www.youtube.com/watch?v=iCKPXasZHTk

(04 Oct '12, 04:16) thetechfirm

Interesting! I am checking! Thanks!

(04 Oct '12, 04:29) Giovanni Soldi

Hi! I looked at the video but I don't find anywhere how to specify the field for getting the rssi values. Do you have any idea?

(04 Oct '12, 04:54) Giovanni Soldi

One Answer:

0

Same problem as http://ask.wireshark.org/questions/14963/how-to-get-the-field-did-unknown-4041-into-the-column, with the same solution (i.e., wait for me to check in a fix and for the fix to show up in a future 1.6.x or 1.8.x release for whatever platform you're using).

answered 12 Oct '12, 18:44

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%