This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

Recently while decoding a IEEE802.11 frame using Wireshark I notice it being detected as an Aruba Management Frame.

As per IEEE standard Frame Subtype value 0x0f in 802.11 Frame is a reserved value. So why does wireshark decode it as Aruba Management. Am I missing something mentioned in the standard.

asked 10 Oct '13, 05:25

Nikunj's gravatar image

Nikunj
1111
accept rate: 0%

Could you raise a bug report including the trace with the missinterpreted frame so we can take a look at it.

(10 Oct '13, 06:32) Anders ♦

I don't think it is a misinterpretation. The dissector code simply defines subtype 0x0f as "Aruba Management" frame, whereas the OP believes this should not be the case, as subtype 0x0f if not used in the standard (I did not check). I guess, the developer of the dissector figured out, that Aruba is silently using that code for their own purposes and added that information to the dissector code.

(10 Oct '13, 07:31) Kurt Knochner ♦
Be the first one to answer this question!
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×41
×3
×1

question asked: 10 Oct '13, 05:25

question was seen: 2,167 times

last updated: 10 Oct '13, 07:31

p​o​w​e​r​e​d by O​S​Q​A