802.11 Data Types and Wireshark filters

Type value Type description Subtype value Subtype description Wireshark display filter
00 Management 0000 Association Request wlan.fc.type_subtype == 0x00
00 Management 0001 Association Response wlan.fc.type_subtype == 0x01
00 Management 0010 Reassociation Request wlan.fc.type_subtype == 0x02
00 Management 0011 Reassociation Response wlan.fc.type_subtype == 0x03
00 Management 0100 Probe Request wlan.fc.type_subtype == 0x04
00 Management 0101 Probe Response wlan.fc.type_subtype == 0x05
00 Management 0110-0111 Reserved
00 Management 1000 Beacon wlan.fc.type_subtype == 0x08
00 Management 1001 ATIM wlan.fc.type_subtype == 0x09
00 Management 1010 Disassociation wlan.fc.type_subtype == 0x0A
00 Management 1011 Authentication wlan.fc.type_subtype == 0x0B
00 Management 1100 Deauthentication wlan.fc.type_subtype == 0x0C
00 Management 1101 Action wlan.fc.type_subtype == 0x0D
00 Management 1110-1111 Reserved
Type value Type description Subtype value Subtype description Wireshark display filter
01 Control 0000-0111 Reserved
01 Control 1000 Block Ack Request wlan.fc.type_subtype == 0x18
01 Control 1001 Block Ack wlan.fc.type_subtype == 0x19
01 Control 1010 PS-Poll wlan.fc.type_subtype == 0x1A
01 Control 1011 RTS wlan.fc.type_subtype == 0x1B
01 Control 1100 CTS wlan.fc.type_subtype == 0x1C
01 Control 1101 ACK wlan.fc.type_subtype == 0x1D
01 Control 1110 CF-end wlan.fc.type_subtype == 0x1E
01 Control 1111 CF-end + CF-ack wlan.fc.type_subtype == 0x1F
Type value Type description Subtype value Subtype description Wireshark display filter
10 Data 0000 Data wlan.fc.type_subtype == 0x20
10 Data 0001 Data + CF-ack wlan.fc.type_subtype == 0x21
10 Data 0010 Data + CF-poll wlan.fc.type_subtype == 0x22
10 Data 0011 Data +CF-ack +CF-poll wlan.fc.type_subtype == 0x23
10 Data 0100 Null wlan.fc.type_subtype == 0x24
10 Data 0101 CF-ack wlan.fc.type_subtype == 0x25
10 Data 0110 CF-poll wlan.fc.type_subtype == 0x26
10 Data 0111 CF-ack +CF-poll wlan.fc.type_subtype == 0x27
10 Data 1000 QoS data wlan.fc.type_subtype == 0x28
10 Data 1001 QoS data + CF-ack wlan.fc.type_subtype == 0x29
10 Data 1010 QoS data + CF-poll wlan.fc.type_subtype == 0x2A
10 Data 1011 QoS data + CF-ack + CF-poll wlan.fc.type_subtype == 0x2B
10 Data 1100 QoS Null wlan.fc.type_subtype == 0x2C
10 Data 1101 Reserved wlan.fc.type_subtype == 0x2D
10 Data 1110 QoS + CF-poll (no data) wlan.fc.type_subtype == 0x2E
10 Data 1111 Qos + CF-ack (no data) wlan.fc.type_subtype == 0x2F
11 Reserved 0000-1111 Reserved

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.