Hi,
I am currently working on an Aironet SAP 1600 series (or a 2600 series). I use it as a sniffer by enabling the monitor frames command on one of my Dot11Radio interfaces.
The endpoint is a PC that is running an HexaDump parser (Wireshark/Omnipeek) and that listen to the port I configured with the monitor frames command. I receive correctly the wireless traffic inside UDP datagrams. Each 802.11 frames have a header of 28 bytes on which I cannot find any information.
After looking at the traffic I would like to ask some questions:
- Why do the QoSData frames systematically lack the QoSControl field?
- Why are the Block Ack frames/Requests systematically 16 Bytes long while usually they have a suffix with more infomation on the Block Ack Policy?
- On windows I lose 2 or 3 IP fragments every 18 fragments. At first I thought that it was the buffers but after changing the sizes it would appear it is not.
Thanks in advance for your answers,
