Kismet Wireless

Kismet Forums

 

Posted by:dragorn
Subject:T# flag - address range of # octets found via TCP
Date:17:55:51 28/10/2006

> why is it that I don't get TCP/ACK packets from some access points? On my test ap two feet away, I have A4 set on the flags. On several remote APs, I see T4 set, but the rest, about 10 have no flags.
>
> How to TCP/ARP packets come into play in 802.11? As I understand it, it goes like this:
>
> client associates to server; client authenticates to server; data sends back and forth.
>
> Maybe it's a matter of terminology that is confusing - when kismet says it got an address range from TCP, it means... a 802.11 wireless frame, containing the TCP packet?

Kismet drills into the 802.11 data frame if it's unencrypted and pulls the tcp info.

-m


Reply to this message