不涉及
使用Wireshark查看802.11报文时,了解常见的帧类型的过滤器语法,可更快捷的过滤出想要查看的报文。
常见的报文过滤器语法如下:
帧类型/子类型 |
过滤器语法 |
Management frame |
wlan.fc.type == 0 |
Control frame |
wlan.fc.type == 1 |
Data frame |
wlan.fc.type == 2 |
Association request |
wlan.fc.type_subtype == 0x00 |
Association response |
wlan.fc.type_subtype == 0x01 |
Reassociation request |
wlan.fc.type_subtype == 0x02 |
Reassociation response |
wlan.fc.type_subtype == 0x03 |
Probe request |
wlan.fc.type_subtype == 0x04 |
Probe response |
wlan.fc.type_subtype == 0x05 |
Beacon |
wlan.fc.type_subtype == 0x08 |
Disassociate |
wlan.fc.type_subtype == 0x0A |
Authentication |
wlan.fc.type_subtype == 0x0B |
Deauthentication |
wlan.fc.type_subtype == 0x0C |
Action frame |
wlan.fc.type_subtype == 0x0D |
Block ACK requests |
wlan.fc.type_subtype == 0x18 |
Block ACK |
wlan.fc.type_subtype == 0x19 |
Power save poll |
wlan.fc.type_subtype == 0x1A |
Request to send |
wlan.fc.type_subtype == 0x1B |
Clear to send |
wlan.fc.type_subtype == 0x1C |
ACK |
wlan.fc.type_subtype == 0x1D |
Contention free period end |
wlan.fc.type_subtype == 0x1E |
NULL data |
wlan.fc.type_subtype == 0x24 |
QoS data |
wlan.fc.type_subtype == 0x28 |
Null QoS data |
wlan.fc.type_subtype == 0x2C |
使用wirshark查看802.11报文时,了解常见的过滤器语法有助于处理问题。
该案例暂时没有网友评论
✖
案例意见反馈
亲~登录后才可以操作哦!
确定你的邮箱还未认证,请认证邮箱或绑定手机后进行当前操作