All geek questions in one place

A small endian package processed by dpkt by a large endian

I use dpkt to parse some ieee80211 packages.
I see that the created object ieee80211 has incorrect values.
Digging deeper, I found that ieee80211 treats data as large endpoints, while in practice the packages that I provide to them are few.

Is there a way to determine the validity of a package at runtime, so I could change it to a large endian before providing it to dpkt.ieee80211?

+4
source share
3 answers

, . IEEE 802.11 , endianess . , . .

3500 + pdf ( ctrl + f), , , TCP/IP. , , . , TKIP. , .

/, /, - , .

+2

, , , , - .

, .

+1

It turns out that for IEEE80211 under CAPWAP, the frame control bytes are simply replaced.
This is probably the case with the original error and the de facto standard.
See Answer in Wireshark Q & A

0
source

Source: https://habr.com/ru/post/1681610/

More articles:


All Articles