1/* @(#) $Header: /tcpdump/master/tcpdump/ieee802_11.h,v 1.12 2007-07-22 19:59:06 guy Exp $ (LBL) */ 2/* 3 * Copyright (c) 2001 4 * Fortress Technologies 5 * Charlie Lenahan ( clenahan@fortresstech.com ) 6 * 7 * Redistribution and use in source and binary forms, with or without 8 * modification, are permitted provided that: (1) source code distributions 9 * retain the above copyright notice and this paragraph in its entirety, (2) 10 * distributions including binary code include the above copyright notice and 11 * this paragraph in its entirety in the documentation or other materials 12 * provided with the distribution, and (3) all advertising materials mentioning 13 * features or use of this software display the following acknowledgement: 14 * ``This product includes software developed by the University of California, 15 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of 16 * the University nor the names of its contributors may be used to endorse 17 * or promote products derived from this software without specific prior 18 * written permission. 19 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED 20 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF 21 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 22 */ 23 24/* Lengths of 802.11 header components. */ 25#define IEEE802_11_FC_LEN 2 26#define IEEE802_11_DUR_LEN 2 27#define IEEE802_11_DA_LEN 6 28#define IEEE802_11_SA_LEN 6 29#define IEEE802_11_BSSID_LEN 6 30#define IEEE802_11_RA_LEN 6 31#define IEEE802_11_TA_LEN 6 32#define IEEE802_11_SEQ_LEN 2 33#define IEEE802_11_CTL_LEN 2 34#define IEEE802_11_IV_LEN 3 35#define IEEE802_11_KID_LEN 1 36 37/* Frame check sequence length. */ 38#define IEEE802_11_FCS_LEN 4 39 40/* Lengths of beacon components. */ 41#define IEEE802_11_TSTAMP_LEN 8 42#define IEEE802_11_BCNINT_LEN 2 43#define IEEE802_11_CAPINFO_LEN 2 44#define IEEE802_11_LISTENINT_LEN 2 45 46#define IEEE802_11_AID_LEN 2 47#define IEEE802_11_STATUS_LEN 2 48#define IEEE802_11_REASON_LEN 2 49 50/* Length of previous AP in reassocation frame */ 51#define IEEE802_11_AP_LEN 6 52 53#define T_MGMT 0x0 /* management */ 54#define T_CTRL 0x1 /* control */ 55#define T_DATA 0x2 /* data */ 56#define T_RESV 0x3 /* reserved */ 57 58#define ST_ASSOC_REQUEST 0x0 59#define ST_ASSOC_RESPONSE 0x1 60#define ST_REASSOC_REQUEST 0x2 61#define ST_REASSOC_RESPONSE 0x3 62#define ST_PROBE_REQUEST 0x4 63#define ST_PROBE_RESPONSE 0x5 64/* RESERVED 0x6 */ 65/* RESERVED 0x7 */ 66#define ST_BEACON 0x8 67#define ST_ATIM 0x9 68#define ST_DISASSOC 0xA 69#define ST_AUTH 0xB 70#define ST_DEAUTH 0xC 71#define ST_ACTION 0xD 72/* RESERVED 0xE */ 73/* RESERVED 0xF */ 74 75 76#define CTRL_CONTROL_WRAPPER 0x7 77#define CTRL_BAR 0x8 78#define CTRL_BA 0x9 79#define CTRL_PS_POLL 0xA 80#define CTRL_RTS 0xB 81#define CTRL_CTS 0xC 82#define CTRL_ACK 0xD 83#define CTRL_CF_END 0xE 84#define CTRL_END_ACK 0xF 85 86#define DATA_DATA 0x0 87#define DATA_DATA_CF_ACK 0x1 88#define DATA_DATA_CF_POLL 0x2 89#define DATA_DATA_CF_ACK_POLL 0x3 90#define DATA_NODATA 0x4 91#define DATA_NODATA_CF_ACK 0x5 92#define DATA_NODATA_CF_POLL 0x6 93#define DATA_NODATA_CF_ACK_POLL 0x7 94 95#define DATA_QOS_DATA 0x8 96#define DATA_QOS_DATA_CF_ACK 0x9 97#define DATA_QOS_DATA_CF_POLL 0xA 98#define DATA_QOS_DATA_CF_ACK_POLL 0xB 99#define DATA_QOS_NODATA 0xC 100#define DATA_QOS_CF_POLL_NODATA 0xE 101#define DATA_QOS_CF_ACK_POLL_NODATA 0xF 102 103/* 104 * The subtype field of a data frame is, in effect, composed of 4 flag 105 * bits - CF-Ack, CF-Poll, Null (means the frame doesn't actually have 106 * any data), and QoS. 107 */ 108#define DATA_FRAME_IS_CF_ACK(x) ((x) & 0x01) 109#define DATA_FRAME_IS_CF_POLL(x) ((x) & 0x02) 110#define DATA_FRAME_IS_NULL(x) ((x) & 0x04) 111#define DATA_FRAME_IS_QOS(x) ((x) & 0x08) 112 113/* 114 * Bits in the frame control field. 115 */ 116#define FC_VERSION(fc) ((fc) & 0x3) 117#define FC_TYPE(fc) (((fc) >> 2) & 0x3) 118#define FC_SUBTYPE(fc) (((fc) >> 4) & 0xF) 119#define FC_TO_DS(fc) ((fc) & 0x0100) 120#define FC_FROM_DS(fc) ((fc) & 0x0200) 121#define FC_MORE_FLAG(fc) ((fc) & 0x0400) 122#define FC_RETRY(fc) ((fc) & 0x0800) 123#define FC_POWER_MGMT(fc) ((fc) & 0x1000) 124#define FC_MORE_DATA(fc) ((fc) & 0x2000) 125#define FC_WEP(fc) ((fc) & 0x4000) 126#define FC_ORDER(fc) ((fc) & 0x8000) 127 128struct mgmt_header_t { 129 u_int16_t fc; 130 u_int16_t duration; 131 u_int8_t da[6]; 132 u_int8_t sa[6]; 133 u_int8_t bssid[6]; 134 u_int16_t seq_ctrl; 135}; 136 137#define MGMT_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\ 138 IEEE802_11_DA_LEN+IEEE802_11_SA_LEN+\ 139 IEEE802_11_BSSID_LEN+IEEE802_11_SEQ_LEN) 140 141#define CAPABILITY_ESS(cap) ((cap) & 0x0001) 142#define CAPABILITY_IBSS(cap) ((cap) & 0x0002) 143#define CAPABILITY_CFP(cap) ((cap) & 0x0004) 144#define CAPABILITY_CFP_REQ(cap) ((cap) & 0x0008) 145#define CAPABILITY_PRIVACY(cap) ((cap) & 0x0010) 146 147struct ssid_t { 148 u_int8_t element_id; 149 u_int8_t length; 150 u_char ssid[33]; /* 32 + 1 for null */ 151}; 152 153struct rates_t { 154 u_int8_t element_id; 155 u_int8_t length; 156 u_int8_t rate[16]; 157}; 158 159struct challenge_t { 160 u_int8_t element_id; 161 u_int8_t length; 162 u_int8_t text[254]; /* 1-253 + 1 for null */ 163}; 164 165struct fh_t { 166 u_int8_t element_id; 167 u_int8_t length; 168 u_int16_t dwell_time; 169 u_int8_t hop_set; 170 u_int8_t hop_pattern; 171 u_int8_t hop_index; 172}; 173 174struct ds_t { 175 u_int8_t element_id; 176 u_int8_t length; 177 u_int8_t channel; 178}; 179 180struct cf_t { 181 u_int8_t element_id; 182 u_int8_t length; 183 u_int8_t count; 184 u_int8_t period; 185 u_int16_t max_duration; 186 u_int16_t dur_remaing; 187}; 188 189struct tim_t { 190 u_int8_t element_id; 191 u_int8_t length; 192 u_int8_t count; 193 u_int8_t period; 194 u_int8_t bitmap_control; 195 u_int8_t bitmap[251]; 196}; 197 198#define E_SSID 0 199#define E_RATES 1 200#define E_FH 2 201#define E_DS 3 202#define E_CF 4 203#define E_TIM 5 204#define E_IBSS 6 205/* reserved 7 */ 206/* reserved 8 */ 207/* reserved 9 */ 208/* reserved 10 */ 209/* reserved 11 */ 210/* reserved 12 */ 211/* reserved 13 */ 212/* reserved 14 */ 213/* reserved 15 */ 214/* reserved 16 */ 215 216#define E_CHALLENGE 16 217/* reserved 17 */ 218/* reserved 18 */ 219/* reserved 19 */ 220/* reserved 16 */ 221/* reserved 16 */ 222 223 224struct mgmt_body_t { 225 u_int8_t timestamp[IEEE802_11_TSTAMP_LEN]; 226 u_int16_t beacon_interval; 227 u_int16_t listen_interval; 228 u_int16_t status_code; 229 u_int16_t aid; 230 u_char ap[IEEE802_11_AP_LEN]; 231 u_int16_t reason_code; 232 u_int16_t auth_alg; 233 u_int16_t auth_trans_seq_num; 234 int challenge_present; 235 struct challenge_t challenge; 236 u_int16_t capability_info; 237 int ssid_present; 238 struct ssid_t ssid; 239 int rates_present; 240 struct rates_t rates; 241 int ds_present; 242 struct ds_t ds; 243 int cf_present; 244 struct cf_t cf; 245 int fh_present; 246 struct fh_t fh; 247 int tim_present; 248 struct tim_t tim; 249}; 250 251struct ctrl_rts_t { 252 u_int16_t fc; 253 u_int16_t duration; 254 u_int8_t ra[6]; 255 u_int8_t ta[6]; 256 u_int8_t fcs[4]; 257}; 258 259#define CTRL_RTS_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\ 260 IEEE802_11_RA_LEN+IEEE802_11_TA_LEN) 261 262struct ctrl_cts_t { 263 u_int16_t fc; 264 u_int16_t duration; 265 u_int8_t ra[6]; 266 u_int8_t fcs[4]; 267}; 268 269#define CTRL_CTS_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+IEEE802_11_RA_LEN) 270 271struct ctrl_ack_t { 272 u_int16_t fc; 273 u_int16_t duration; 274 u_int8_t ra[6]; 275 u_int8_t fcs[4]; 276}; 277 278#define CTRL_ACK_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+IEEE802_11_RA_LEN) 279 280struct ctrl_ps_poll_t { 281 u_int16_t fc; 282 u_int16_t aid; 283 u_int8_t bssid[6]; 284 u_int8_t ta[6]; 285 u_int8_t fcs[4]; 286}; 287 288#define CTRL_PS_POLL_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_AID_LEN+\ 289 IEEE802_11_BSSID_LEN+IEEE802_11_TA_LEN) 290 291struct ctrl_end_t { 292 u_int16_t fc; 293 u_int16_t duration; 294 u_int8_t ra[6]; 295 u_int8_t bssid[6]; 296 u_int8_t fcs[4]; 297}; 298 299#define CTRL_END_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\ 300 IEEE802_11_RA_LEN+IEEE802_11_BSSID_LEN) 301 302struct ctrl_end_ack_t { 303 u_int16_t fc; 304 u_int16_t duration; 305 u_int8_t ra[6]; 306 u_int8_t bssid[6]; 307 u_int8_t fcs[4]; 308}; 309 310#define CTRL_END_ACK_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\ 311 IEEE802_11_RA_LEN+IEEE802_11_BSSID_LEN) 312 313struct ctrl_ba_t { 314 u_int16_t fc; 315 u_int16_t duration; 316 u_int8_t ra[6]; 317 u_int8_t fcs[4]; 318}; 319 320#define CTRL_BA_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+IEEE802_11_RA_LEN) 321 322struct ctrl_bar_t { 323 u_int16_t fc; 324 u_int16_t dur; 325 u_int8_t ra[6]; 326 u_int8_t ta[6]; 327 u_int16_t ctl; 328 u_int16_t seq; 329 u_int8_t fcs[4]; 330}; 331 332#define CTRL_BAR_HDRLEN (IEEE802_11_FC_LEN+IEEE802_11_DUR_LEN+\ 333 IEEE802_11_RA_LEN+IEEE802_11_TA_LEN+\ 334 IEEE802_11_CTL_LEN+IEEE802_11_SEQ_LEN) 335 336struct meshcntl_t { 337 u_int8_t flags; 338 u_int8_t ttl; 339 u_int8_t seq[4]; 340 u_int8_t addr4[6]; 341 u_int8_t addr5[6]; 342 u_int8_t addr6[6]; 343}; 344 345#define IV_IV(iv) ((iv) & 0xFFFFFF) 346#define IV_PAD(iv) (((iv) >> 24) & 0x3F) 347#define IV_KEYID(iv) (((iv) >> 30) & 0x03) 348