1 /* @(#) $Header: /tcpdump/master/tcpdump/ieee802_11.h,v 1.12 2007-07-22 19:59:06 guy Exp $ (LBL) */
4 * Fortress Technologies
5 * Charlie Lenahan ( clenahan@fortresstech.com )
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that: (1) source code distributions
9 * retain the above copyright notice and this paragraph in its entirety, (2)
10 * distributions including binary code include the above copyright notice and
11 * this paragraph in its entirety in the documentation or other materials
12 * provided with the distribution, and (3) all advertising materials mentioning
13 * features or use of this software display the following acknowledgement:
14 * ``This product includes software developed by the University of California,
15 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
16 * the University nor the names of its contributors may be used to endorse
17 * or promote products derived from this software without specific prior
19 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
20 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
21 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
24 /* Lengths of 802.11 header components. */
25 #define IEEE802_11_FC_LEN 2
26 #define IEEE802_11_DUR_LEN 2
27 #define IEEE802_11_DA_LEN 6
28 #define IEEE802_11_SA_LEN 6
29 #define IEEE802_11_BSSID_LEN 6
30 #define IEEE802_11_RA_LEN 6
31 #define IEEE802_11_TA_LEN 6
32 #define IEEE802_11_SEQ_LEN 2
33 #define IEEE802_11_IV_LEN 3
34 #define IEEE802_11_KID_LEN 1
36 /* Frame check sequence length. */
37 #define IEEE802_11_FCS_LEN 4
39 /* Lengths of beacon components. */
40 #define IEEE802_11_TSTAMP_LEN 8
41 #define IEEE802_11_BCNINT_LEN 2
42 #define IEEE802_11_CAPINFO_LEN 2
43 #define IEEE802_11_LISTENINT_LEN 2
45 #define IEEE802_11_AID_LEN 2
46 #define IEEE802_11_STATUS_LEN 2
47 #define IEEE802_11_REASON_LEN 2
49 /* Length of previous AP in reassocation frame */
50 #define IEEE802_11_AP_LEN 6
52 #define T_MGMT 0x0 /* management */
53 #define T_CTRL 0x1 /* control */
54 #define T_DATA 0x2 /* data */
55 #define T_RESV 0x3 /* reserved */
57 #define ST_ASSOC_REQUEST 0x0
58 #define ST_ASSOC_RESPONSE 0x1
59 #define ST_REASSOC_REQUEST 0x2
60 #define ST_REASSOC_RESPONSE 0x3
61 #define ST_PROBE_REQUEST 0x4
62 #define ST_PROBE_RESPONSE 0x5
67 #define ST_DISASSOC 0xA
75 #define CTRL_CONTROL_WRAPPER 0x7
76 #define CTRL_BLOCK_ACK_REQ 0x8
77 #define CTRL_BLOCK_ACK 0x9
78 #define CTRL_PS_POLL 0xA
82 #define CTRL_CF_END 0xE
83 #define CTRL_END_ACK 0xF
86 #define DATA_DATA_CF_ACK 0x1
87 #define DATA_DATA_CF_POLL 0x2
88 #define DATA_DATA_CF_ACK_POLL 0x3
89 #define DATA_NODATA 0x4
90 #define DATA_NODATA_CF_ACK 0x5
91 #define DATA_NODATA_CF_POLL 0x6
92 #define DATA_NODATA_CF_ACK_POLL 0x7
94 #define DATA_QOS_DATA 0x8
95 #define DATA_QOS_DATA_CF_ACK 0x9
96 #define DATA_QOS_DATA_CF_POLL 0xA
97 #define DATA_QOS_DATA_CF_ACK_POLL 0xB
98 #define DATA_QOS_NODATA 0xC
99 #define DATA_QOS_CF_POLL_NODATA 0xE
100 #define DATA_QOS_CF_ACK_POLL_NODATA 0xF
103 * The subtype field of a data frame is, in effect, composed of 4 flag
104 * bits - CF-Ack, CF-Poll, Null (means the frame doesn't actually have
105 * any data), and QoS.
107 #define DATA_FRAME_IS_CF_ACK(x) ((x) & 0x01)
108 #define DATA_FRAME_IS_CF_POLL(x) ((x) & 0x02)
109 #define DATA_FRAME_IS_NULL(x) ((x) & 0x04)
110 #define DATA_FRAME_IS_QOS(x) ((x) & 0x08)
113 * Bits in the frame control field.
115 #define FC_VERSION(fc) ((fc) & 0x3)
116 #define FC_TYPE(fc) (((fc) >> 2) & 0x3)
117 #define FC_SUBTYPE(fc) (((fc) >> 4) & 0xF)
118 #define FC_TO_DS(fc) ((fc) & 0x0100)
119 #define FC_FROM_DS(fc) ((fc) & 0x0200)
120 #define FC_MORE_FLAG(fc) ((fc) & 0x0400)
121 #define FC_RETRY(fc) ((fc) & 0x0800)
122 #define FC_POWER_MGMT(fc) ((fc) & 0x1000)
123 #define FC_MORE_DATA(fc) ((fc) & 0x2000)
124 #define FC_WEP(fc) ((fc) & 0x4000)
125 #define FC_ORDER(fc) ((fc) & 0x8000)
127 struct mgmt_header_t
{
136 #define MGMT_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\
137 IEEE802_11_DA_LEN+IEEE802_11_SA_LEN+\
138 IEEE802_11_BSSID_LEN+IEEE802_11_SEQ_LEN)
140 #define CAPABILITY_ESS(cap) ((cap) & 0x0001)
141 #define CAPABILITY_IBSS(cap) ((cap) & 0x0002)
142 #define CAPABILITY_CFP(cap) ((cap) & 0x0004)
143 #define CAPABILITY_CFP_REQ(cap) ((cap) & 0x0008)
144 #define CAPABILITY_PRIVACY(cap) ((cap) & 0x0010)
155 u_char ssid
[33]; /* 32 + 1 for null */
167 u_int8_t text
[254]; /* 1-253 + 1 for null */
173 u_int16_t dwell_time
;
175 u_int8_t hop_pattern
;
190 u_int16_t max_duration
;
191 u_int16_t dur_remaing
;
199 u_int8_t bitmap_control
;
200 u_int8_t bitmap
[251];
221 #define E_CHALLENGE 16
230 u_int8_t timestamp
[IEEE802_11_TSTAMP_LEN
];
231 u_int16_t beacon_interval
;
232 u_int16_t listen_interval
;
233 u_int16_t status_code
;
235 u_char ap
[IEEE802_11_AP_LEN
];
236 u_int16_t reason_code
;
238 u_int16_t auth_trans_seq_num
;
239 elem_status_t challenge_status
;
240 struct challenge_t challenge
;
241 u_int16_t capability_info
;
242 elem_status_t ssid_status
;
244 elem_status_t rates_status
;
245 struct rates_t rates
;
246 elem_status_t ds_status
;
248 elem_status_t cf_status
;
250 elem_status_t fh_status
;
252 elem_status_t tim_status
;
264 #define CTRL_RTS_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\
265 IEEE802_11_RA_LEN+IEEE802_11_TA_LEN)
274 #define CTRL_CTS_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+IEEE802_11_RA_LEN)
283 #define CTRL_ACK_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+IEEE802_11_RA_LEN)
285 struct ctrl_ps_poll_t
{
293 #define CTRL_PS_POLL_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_AID_LEN+\
294 IEEE802_11_BSSID_LEN+IEEE802_11_TA_LEN)
304 #define CTRL_END_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\
305 IEEE802_11_RA_LEN+IEEE802_11_BSSID_LEN)
307 struct ctrl_end_ack_t
{
315 #define CTRL_END_ACK_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\
316 IEEE802_11_RA_LEN+IEEE802_11_BSSID_LEN)
318 struct ctrl_block_ack_req_t
{
323 u_int16_t bar_control
;
326 #define CTRL_BLOCK_ACK_REQ_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\
327 IEEE802_11_RA_LEN+IEEE802_11_TA_LEN)
329 struct ctrl_block_ack_t
{
334 u_int16_t ba_control
;
337 #define CTRL_BLOCK_ACK_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\
338 IEEE802_11_RA_LEN+IEEE802_11_TA_LEN)
340 #define IV_IV(iv) ((iv) & 0xFFFFFF)
341 #define IV_PAD(iv) (((iv) >> 24) & 0x3F)
342 #define IV_KEYID(iv) (((iv) >> 30) & 0x03)