Time for action – viewing management, control, and data frames

Now we will learn how to apply filters in Wireshark to look at management, control, and data frames.

Please follow these instructions step by step:

1. To view all the management frames in the packets being captured, enter the filter wlan.fc.type == 0 into the filter window and hit Enter. You can stop the packet capture if you want to prevent the packets from scrolling down too fast.
   
2. To view control frames, modify the filter expression to read wlan.fc.type == 1:
   
3. To view data frames, modify the filter expression to wlan.fc.type == 2:
   
4. To additionally select a subtype, use the wlan.fc.subtype filter. For example, to view all the beacon frames among all management frames, use the following filter:

   (wlan.fc.type == 0) && (wlan.fc.subtype == 8)

   
5. Alternatively, you can right-click on any of the header fields in the middle window and then select Apply as Filter | Selected to add it as a filter:
   
6. This will automatically add the correct...