This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Hi everybody I try to get the radiotap.mactime field from WiFi dongle with Atheros chipset. With any Atheros based device, I get an empty field, while I get the correct value with a Broadcam chipset. I'm on Linux (Ubuntu 12.4) and I tried all what I could to get this data available to tshark (drivers and firmware are up to date)

Any hints from you guys on this ?

BR

Olivier.

asked 08 Aug '13, 06:59

omarce's gravatar image

omarce
11112
accept rate: 0%

I get an empty field

Empty in what sense? Not present at all, or present but with a bogus value (e.g., always zero)?

(08 Aug '13, 15:24) Guy Harris ♦♦

Hi Guy, the field no present at all. Meanwhile, I found the reason. When looking at radiotap.tsft.present it returns false, so it was normal that mactime was empty.

The reason was that I used a USB device with an old Atheros chipset, and the associated driver was carl9170 and not ath9k_htc. carl9170 seems not able to reporting mactime.

I was confused by the fact that I had several dongle, then several drivers loaded.

BTW I think that it would be better for tshark to return an non empty char string (like "none") rather than an empty string.

Regards

permanent link

answered 09 Aug '13, 01:30

omarce's gravatar image

omarce
11112
accept rate: 0%

I think that it would be better for tshark to return an non empty char string (like "none") rather than an empty string

File a bug on that if you want it changed, but be prepared for other users to say they prefer nothing to be reported for absent fields.

(09 Aug '13, 12:14) Guy Harris ♦♦

Hi Olivier,

Cna you please share both the wireless adapters (Broadcom and Atheros) used that eventually reported the radiotap.mactime ?

I am facing similar problem when I try with Dlink DWA-160-RevA2 card that AR9170.

Thanks, Sudheer

(08 Jan '14, 11:57) Sudheer
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×19
×4

question asked: 08 Aug '13, 06:59

question was seen: 2,174 times

last updated: 08 Jan '14, 15:53

p​o​w​e​r​e​d by O​S​Q​A