Data Received

Data sent frames

This really is a breeze. Look in the code, revisions >= patch17 contain the logic. Will make a more complete page later.

Harder than i thought. The magic number here is 0x0055, different from the more often observed 0x004d. As noted in the ancient page, this is a difference of packet type. I don't know 802.11 well enough to know for now, if someone wanna do the tedious work ;-)

TODO : check if this magic number is device dependent.

NOTE : There must be somewhere a SPEED (b/g, which speed, modulation...) indication. Where ?

00000000: 80 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 55 00 6c 01 9e 09 00 03 8a 00 00 b5 19 50 72 00
00000020: 00 00 00 00 08 02 00 00 ff ff ff ff ff ff 00 09
00000030: 5b c7 09 38 00 0c 41 de 30 96 10 3e aa aa 03 00
00000040: 00 00 08 00 45 00 01 48 15 df 00 00 80 11 23 c7
00000050: 00 00 00 00 ff ff ff ff 00 44 00 43 01 34 71 0b
00000060: 01 01 06 00 22 4e 55 15 00 00 00 00 00 00 00 00
00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 41 de
00000080: 30 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000140: 00 00 00 00 00 00 00 00 00 00 00 00 63 82 53 63
00000150: 35 01 01 fb 01 01 3d 07 01 00 0c 41 de 30 96 0c
00000160: 0f 6a 65 61 6e 2d 33 36 32 30 38 31 66 31 32 37
00000170: 3c 08 4d 53 46 54 20 35 2e 30 37 0a 01 0f 03 06
00000180: 2c 2e 2f 1f 21 2b ff 00 00 00 00 00 52 41 5f ac

Another 55

00000000: 66 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 55 00 52 00 9e 09 00 03 8a 00 00 8c 0e 14 74 00
00000020: 00 00 00 00 08 02 00 00 ff ff ff ff ff ff 00 09
00000030: 5b c7 09 38 00 09 5b c7 09 38 30 3e aa aa 03 00
00000040: 00 00 08 06 00 01 08 00 06 04 00 01 00 09 5b c7
00000050: 09 38 c0 a8 14 0d 00 00 00 00 00 00 c0 a8 14 e2
00000060: 00 00 83 00 1b 00 86 00 06 00 3d 00 04 00 19 00
00000070: 60 02 b0 d4 f0 bc 6e 6c

Another one, with good magic number, from the same snoop.

00000000: 5b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 4d 00 47 00 9e 09 00 00 1f 00 00 d2 79 67 72 00
00000020: 00 00 00 00 80 00 00 00 ff ff ff ff ff ff 00 90
00000030: 4b 62 20 1e 00 90 4b 62 20 1e 60 16 94 51 ac fe
00000040: 03 01 00 00 64 00 11 00 00 0e 44 57 2d 42 2d 32
00000050: 30 30 2d 31 34 62 33 33 01 04 82 84 0b 16 03 01
00000060: 0b 05 04 01 03 00 00 d5 19 00 62 45
<example>

Another one, received after a control sequence 

Ctrl sequence :
<example>
    00000000: 0f 08 00 00 00 40 40 00 00 00

  PipeHandle           = 812c1760 [endpoint 0x00000001]
    00000000: 00 02 02 00 14 00 00 00 00 00 00 00 00 00 00 00
    00000010: 01 80 08 00 00 00 00 00 0d 00 00 00 03 00 01 00
    00000020: 01 00 00 00

00000000: 60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 5d 00 4c 00 9e 09 00 00 8a 00 00 79 0f db 73 00
00000020: 00 00 00 00 80 00 00 00 ff ff ff ff ff ff 00 09
00000030: 5b c7 09 38 00 09 5b c7 09 38 20 3e dd d1 1f fe
00000040: 20 00 00 00 64 00 21 04 00 06 63 6f 75 63 6f 75
00000050: 01 04 82 84 8b 96 03 01 0b 2a 01 00 32 08 0c 12
00000060: 18 24 30 48 60 6c 05 04 00 01 00 00 76 ed c0 0a

A 0x0053 now ! where will it end ?

00000000: 84 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 53 00 70 01 9e 09 00 08 83 00 00 84 ad e4 7e 00
00000020: 00 00 00 00 08 02 2c 00 00 0c 41 de 30 96 00 09
00000030: 5b c7 09 38 00 09 5b c7 09 38 b0 3e aa aa 03 00
00000040: 00 00 08 00 45 10 01 4c 00 00 00 00 40 11 cf 51
00000050: c0 a8 14 0d c0 a8 14 e2 00 43 00 44 01 38 48 39
00000060: 02 01 06 00 22 4e 55 15 00 00 00 00 00 00 00 00
00000070: c0 a8 14 e2 c0 a8 14 0d 00 00 00 00 00 0c 41 de
00000080: 30 96 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000090: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000a0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000b0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000c0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000d0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000e0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
000000f0: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000110: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000120: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000130: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000140: 00 00 00 00 00 00 00 00 00 00 00 00 63 82 53 63
00000150: 35 01 02 36 04 c0 a8 14 0d 33 04 00 00 17 70 01
00000160: 04 ff ff ff 00 0f 1c 6c 6f 63 61 6c 2e 67 78 61
00000170: 61 66 6f 6f 74 2e 68 6f 6d 65 6c 69 6e 75 78 2e
00000180: 6f 72 67 03 04 c0 a8 14 0d 06 04 c0 a8 12 0d ff
00000190: 0d 79 6d 7f

00000000: 68 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000010: 53 00 54 00 9e 09 00 08 83 00 00 00 f4 c7 81 00
00000020: 00 00 00 00 08 02 2c 00 00 0c 41 de 30 96 00 09
00000030: 5b c7 09 38 00 09 5b c7 09 38 00 3f aa aa 03 00
00000040: 00 00 08 00 45 00 00 30 00 01 40 00 40 01 90 8c
00000050: c0 a8 14 0d c0 a8 14 e2 08 00 3f e3 b8 1c 00 00
00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
00000070: 00 00 00 00 19 38 46 71

Acknowledgement of sent data ?

First one sent : (1) receives nada ?

    00000000: 00 02 02 00 14 00 00 00 00 00 00 00 00 00 00 00
    00000010: 01 80 08 00 00 00 00 00 0d 00 00 00 03 00 00 00
    00000020: 00 00 00 00

    00000000: 00 02 02 00 14 00 00 00 00 00 00 00 00 00 00 00
    00000010: 01 80 08 00 00 00 00 00 0d 00 00 00 03 00 03 00
    00000020: 03 00 00 00

15 ms later, sends this : (3) enables mgmt receiving ?

    00000000: 00 02 02 00 14 00 00 00 00 00 00 00 00 00 00 00
    00000010: 01 80 08 00 00 00 00 00 0d 00 00 00 03 00 01 00
    00000020: 01 00 00 00

Much used during scan on uli's device. (4)

00000000: 00 02 02 00 14 00 00 00 00 00 00 00 00 00 00 00
00000010: 01 80 08 00 00 00 00 00 0d 00 00 00 03 00 01 00
00000020: 00 00 f4 01

usbsnoop ver1 first alternates between (4) and (1), then goes between (2) and (3). (2) followed quickly by (3), then wait, then again...