wireshark WLAN无线报文分析常用指令

1.搜索由源或目的mac地址发送或接收的帧数据
wlan.sa == 11.11.11.11.11.11
wlan.da

2,搜索wifi不同类型帧数据
Management frame
wlan.fc.type == 0
Control frame
wlan.fc.type == 1
Data frame
wlan.fc.type == 2
Association request
wlan.fc.type _ subtype == 0x00
Association response
wlan.fc.type _ subtype == 0x01
Reassociation request
wlan.fc.type _ subtype == 0x02
Reassociation response
wlan.fc.type _ subtype == 0x03
Probe request
wlan.fc.type _ subtype == 0x04
Probe response
wlan.fc.type _ subtype == 0x05
Beacon
wlan.fc.type _ subtype == 0x08
Disassociate
wlan.fc.type _ subtype == 0x0A
Authentication
wlan.fc.type _ subtype == 0x0B
Deauthentication
wlan.fc.type _ subtype == 0x0C
Action frame
wlan.fc.type _ subtype == 0x0D
Block ACK requests
wlan.fc.type _ subtype == 0x18
Block ACK
wlan.fc.type _ subtype == 0x19
Power save poll
wlan.fc.type _ subtype == 0x1A
Request to send
wlan.fc.type _ subtype == 0x1B
Clear to send
wlan.fc.type _ subtype == 0x1C
ACK
wlan.fc.type _ subtype == 0x1D
Contention free period end
wlan.fc.type _ subtype == 0x1E
NULL data
wlan.fc.type _ subtype == 0x24
QoS data
wlan.fc.type _ subtype == 0x28
Null QoS data
wlan.fc.type _ subtype == 0x2C