802.11 Management Frames
Wireless management frames
Management frames have type value of 00 and are used to manage the BSS. There are in total 16 frames but the 2 are reserved values.
The subtype value defines the function of the frame
Below you can find where the Type and Subtype can be found in a frame.
Example
The subtypes and associated values.
Also you can find the wireshark filter for every type.
All Management Frames wlan.fc.type == 0
Subtype: 0000 - Association
Request
Subtype: 0001 - Association
Response
Subtype: 0010 - Reassociation
Request
Subtype: 0011 - Reassociation
Response
Subtype: 0100 - Probe
Request
Subtype: 0101 - Probe
Response
Subtype: 0110 - Timing
Advertisement
Subtype: 0111 - Reserved
Subtype: 1000 - Beacon
Subtype: 1001 - ATIM
Subtype: 1010 - Disassociation
Subtype: 1011 - Authentication
Subtype: 1100 - Deauthentication
Subtype: 1101 - Action
Subtype: 1110 - Action
No Ack
Subtype: 1111 - Reserved
On the below link you can download a packet capture i created during my lab.
It missing frames with subtype 6,9,10,14. I will try to update if i find the missing Frames.
Download Management Frames Capture
References
CWAP Study and Reference Guide Chapter 4
https://www.cwnp.com/cwap-study-guide403/
Wireshark Filters
https://www.wireshark.org/docs/dfref/w/wlan.html
Comments
Post a Comment