Wireshark session displaying empty field names for wireless packets

Question

question

johnnyboy41987 asked Apr 6, '11 johnnyboy41987 posted Apr 6, '11

Wireshark session displaying empty field names for wireless packets

Hi,

We are using iTest 4.0.3 for automating a testcase which involves sniffing wireless packets. The wireshark session in iTest is not displaing some fields in the "show details <packet_no>" command. The same field is displaying correctly in the tshark output.

For example a snip from the "show details <packet_no>" output in wireshark session

               wlan_mgt.tag.interpretation                       | 
                                                                 | Vendor Specific: WME       <----- No Field displayed
               wlan_mgt.tag.number                               | 221

Same packet snippet from tshark output

           Tag interpretation: Unknown + Name: tb4-root1 #Clients: 0
        Vendor Specific: WME       <---- Field name is correctly displayed
            Tag Number: 221 (Vendor Specific)
            Tag length: 24
            Tag interpretation: WME PE: type 2, subtype 1, version 1, parameter set 133
            Tag interpretation: WME AC Parameters: ACI 0 (Best Effort), Admission Control not Mandatory, AIFSN 3, ECWmin 4, ECWmax 4, TXOP 0
            Tag interpretation: WME AC Parameters: ACI 1 (Background), Admission Control not Mandatory, AIFSN 7, ECWmin 4, ECWmax 4, TXOP 0
            Tag interpretation: WME AC Parameters: ACI 2 (Video), Admission Control not Mandatory, AIFSN 2, ECWmin 3, ECWmax 3, TXOP 94
            Tag interpretation: WME AC Parame

I am attaching both wireshark and tshark output in this post. Can anyone tell me why this is happening ?

iTest

wireshark_output.txt (143.7 KiB)

tshark_output.txt (6.8 KiB)

10 |950

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 1 · 2011-04-09T00:11:29Z

amresh answered Apr 9, '11 amresh posted Apr 9, '11

Hi,

Are you able to see those fields in Wireshark GUI correctly. If yes could you please attach your .pcap file.

10 |950

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

Answer 2 · 2011-04-06T11:02:08Z

lakshminarayana answered Apr 6, '11 lakshminarayana posted Apr 6, '11

Hi,

According to my understanding i think Vendor Specific: WME and Vendor Specific: Aironet CCX version = 5 are a kind of headers and under that the field names and values are mentioned in details.

I hope this information might help you.

Thanks

1

10 |950

Attachments: Up to 2 attachments (including images) can be used with a maximum of 512.0 KiB each and 1.0 MiB total.

johnnyboy41987 commented · Apr 06, 2011 at 06:49 PM

Yes it is a header but why there is no field name?

0 ·

question