Output of radiotap.dbm_antsignal has two readings, what is the first and last?
Example:
tshark -i mon0 -T fields -e wlan.sa -e radiotap.dbm_antsignal -c 5
Prints
xx:xx:xx:xx:xx:xx:xx -88,-88
Most of the times the readings are not the same. What is the first number and last number?
Comments
Have you looked at a full decode of one of these packets?
Can you provide a capture file to look at?
What is output if you add
-e radiotap.present.ext
to the tshark command above.Once in a while it will print one set of numbers but nearly all of the time I get two. This is using raspbian latest, some with nexmon drivers and some with a supported USB wifi present (no nexmon installed) I am using the output in python and can strip part of the line, but I was'nt sure why there are two readings.
Can you capture to file and then open in the Wireshark GUI?
The
1,0
output fromradiotap.present.ext
indicates that there are extension fields.There is a sample pcap attached to this bug that shows extended radiotap fields.