Hi, Is there a version of wireshark source code that supports 802.11s (mesh) protocol and does not require a patch. Thank you very much. asked 12 May '11, 22:08 bthapa |
One Answer:
Initial support for the Hybrid Wireless Mesh Protocol was added to the 802.11 dissector on May 25, 2010 in r32955 and was backported to the 1.4.x branch but not the 1.2.x branch. So, if you download the latest sources for either the trunk or the trunk-1.4 branch, you will have a version of wireshark source code that supports 802.11s that does not require a patch. See http://www.wireshark.org/develop.html for information on how to obtain the source code. answered 13 May '11, 06:00 cmaynard ♦♦ showing 5 of 6 show 1 more comments |
Chris, I compiled and installed the latest source from trunk. Then I tried to open http://o11s.org/files/mesh_traffic.cap. It didn't parse the Mesh parameters in the IEEE 802.11 Management Frame field :(. I am trying the latest stable wireshark version now..1.4.6. I will update you soon with a success story or a failure.
Well, I am mistaken. Support was added but not enabled as MESH_OVERRIDES was left undefined. I'm not sure why that was, perhaps because it's still in draft? In any case, there is no current version of Wireshark available that will dissect 802.11s without a patch. I was going to check in a change to support it, but I noticed some redefintions taking place as a result, and I don't know enough or have the time to look at the implications. I would suggest filing a bugzilla bug report asking to have it enabled. If there are conflicts, perhaps an IEEE802.11 preference could be added instead.
As I recall, MESH_OVERRIDES was undefined because some of the tag IDs conflict with pre-existing code.
Ok. I even reverted back to svn r32955. Compiled/Installed and even that could not parse the mesh_traffic.cap from http://o11s.org/files/mesh_traffic.cap. Do you have any suggestion for me?
Is there any specific wireshark source version that you know works and recommend me using which has a patch known to work. I have tried wireshark-1.2.* version with patch wireshark-1.2.3-mesh-support from http://o11s.org/patches/wireshark/wireshark-1.2.3-mesh-support.patch
and that does not work either
Thank you Chris and Gerald.
As I mentioned above, I would suggest filing a Wireshark bug report at https://bugs.wireshark.org/bugzilla/ asking to have 802.11s support completed. I'd also recommend attaching the capture file to the bug report.
Looking at the code, tags 52, 55, and 69 conflict with 802.11r-2008.