FW: FW: Raw Sockets

Dave Hinkle hinkle at DerbyWorks.com
Fri May 9 12:10:26 EDT 2003

Thank you so much for your help.  I chose 1535 because it was an unasigned
protocol number, and I didn't want to conflict with anybody else.  I changed
it to 1537 and it worked properly.

The documents I have indicate that the field is only considered a length up
to 1500 (1500 being the maximum size for an Ethernet frame?).  

As I need to integrate with an already existing installed base of routers,
for the moment I'll just change the cutoff point in my copy of the hostap

I am, of course, disturbed that I may not be following the standard
correctly.  Does anybody know what RFC's would be relevant so I can do the

-----Original Message-----
From: Jouni Malinen [mailto:jkmaline at cc.hut.fi] 
Sent: Thursday, May 08, 2003 9:47 PM
To: hostap at shmoo.com
Subject: Re: FW: Raw Sockets

On Thu, May 08, 2003 at 03:46:53PM -0500, Dave Hinkle wrote:

> Ok, I've written a little program to simplify as much as possible the code
> that doesn't work.  The example program opens up a raw socket and sends an
> Ethernet packet (type 1535) every second.

Do you have any special reason for using exactly ether proto 1535? If
you replace that with 1536, I would bet that the problem goes away.. ;-)

There are different encapsulation methods for IEEE 802.11 frames and
Host AP driver selects which one to use based on the ethertype. If this
type is 1535 or smaller, it is assumed to be length field, not protocol.
As such, there will be no additional encapsulation and the "protocol" is
replaced by the real length of the frame in the receiving system. In
this case, your test packet changes to one with type 10, not 1535..

I could change Host AP driver to encapsulate all frames with 0..1535 in
protocol field with the same RFC1042 header like most other frames. That
would probably make the packets look the same in the receiver. However,
before doing this, I would like to confirm that this would be the
correct way to send such a frame (and that the frame you are trying
to send is actually valid).

Jouni Malinen                                            PGP id EFC895FA
HostAP mailing list
HostAP at shmoo.com

More information about the HostAP mailing list