First time here? Check out the FAQ!
THIS IS A TEST INSTANCE. Feel free to ask and answer questions, but take care to avoid triggering too many notifications.
Ask Your Question
0

FILS Request Parameter Decode

  • retag add tags

The current version (4.0.10 or 4.1 dev) of Wireshark does not decode FILS request parameter. Is that possible to add that support? Sample capture available in the below post https://mrncciew.com/2023/09/27/6ghz-...

Ext Tag: FILS Request Parameters: Undecoded Tag Number: Element ID Extension (255) Ext Tag length: 2 Ext Tag Number: FILS Request Parameters (2) Ext Tag Data: 00ff [Expert Info (Note/Undecoded): Dissector for 802.11 Extension Tag (FILS Request Parameters) code not implemented, Contact Wireshark developers if you want this supported]

mrncciew's avatar
3
mrncciew
asked 2023-10-08 19:47:40 +0000, updated 2023-10-08 19:51:58 +0000
edit flag offensive 0 remove flag close merge delete

Comments

The missing entries are for 0000 and 00ff. Any idea what those tags are?

No.     Time        Source           Destination    Protocol    Ext Tag Data    Info
1114    05:18:29    IntelCor_65:27:14   Broadcast   802.11  0000    Probe Request, SN=1220, FN=0, Flags=........C, SSID=80
14479   05:18:50    IntelCor_65:27:14   Broadcast   802.11  0000    Probe Request, SN=1221, FN=0, Flags=........C, SSID=Wildcard (Broadcast)
14491   05:18:50    IntelCor_65:27:14   Broadcast   802.11  0000    Probe Request, SN=1222, FN=0, Flags=........C, SSID=Wildcard (Broadcast)
16941   05:18:56    ee:86:75:21:60:6a   Broadcast   802.11  00ff    Probe Request, SN=2477, FN=0, Flags=........C, SSID="mrn-psk"
16942   05:18:56    ee:86:75:21:60:6a   Broadcast   802.11  00ff    Probe Request, SN=2478, FN=0, Flags=........C, SSID="mrn-psk"
Chuckc's avatar Chuckc (2023-10-08 20:50:37 +0000) edit
more
  • delete

According to the IEEE 802.11 standard (9.4.2.177), frame format of FILS Request Parameter Element is as below.

Element ID [1 Octet], Length [1 Octet], Element ID Extension [1 Octet], Parameter Control Bitmap [1 Octet], Max Channel Time [1 Octet], FILS Criteria [0 or 1 Octet], Max Delay Limit [0 or 1 Octet], Minimum Data Rate [0 or 3 Octet], RCPI Limit [0 or 1 Octet], OUI Response Criteria [0 or 2Octet]

mrncciew's avatar mrncciew (2023-10-09 06:06:45 +0000) edit
more
  • delete
add a comment see more comments

1 Answer

0

The way to file such requests is to create an enhancement issue at the Wireshark GitLab project. You seem to have all the information that is needed for anyone to pick it up and create a merge request with the required code changes, if anyone is so inclined.

Jaap's avatar
13.7k
Jaap
answered 2023-10-09 06:46:59 +0000
edit flag offensive 0 remove flag delete link
more

Comments

19386: 802.11 FILS Request Parameter is not decoded by Wireshark

Chuckc's avatar Chuckc (2023-10-09 10:17:26 +0000) edit
more
  • delete
add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

Add Answer