-
Notifications
You must be signed in to change notification settings - Fork 1.1k
Open
Description
Gopacket fails to decode the wireshark sample pcap at:
Printing one of the packets results in the following:
PACKET: 131 bytes, truncated, wire length 131 cap length 131 @ 2000-01-01 00:04:57.630171 +0000 GMT
- Layer 1 (24 bytes) = Dot11 {Contents=[..24..] Payload=[..103..] Type=Data Proto=0 Flags=FROM-DS DurationID=44 Address1=00:16:bc:3d:aa:57 Address2=00:01:e3:41:bd:6e Address3=00:01:e3:41:bd:6e Address4= SequenceNumber=440 FragmentNumber=0 Checksum=0 QOS=nil HTControl=nil DataLayer={ Contents=[] Payload=[..103..]}}
- Layer 2 (00 bytes) = Dot11Data {Contents=[] Payload=[..103..]}
- Layer 3 (03 bytes) = LLC {Contents=[170, 170, 3] Payload=[..100..] DSAP=170 IG=false SSAP=170 CR=false Control=3}
- Layer 4 (05 bytes) = SNAP {Contents=[..5..] Payload=[..95..] OrganizationalCode=[0, 0, 0] Type=EAPOL}
- Layer 5 (04 bytes) = EAPOL {Contents=[1, 3, 0, 95] Payload=[..91..] Version=1 Type=EAPOLKey Length=95}
- Layer 6 (91 bytes) = DecodeFailure Packet decoding error: EAPOLKey length 91 too short, 95 required
Wireshark appears to parse the pcap correctly.
Possibly related to #544 but I've not had much time to root cause.
Metadata
Metadata
Assignees
Labels
No labels