---
description: >-
  Comandos para realizar análisis de paquetes presentes en captura de tráfico
  mediante Tshark.
---

# Análisis de paquetes con Tshark

***

## Paquete Association Request

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==0"
```

***

## Paquete Association Response

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==1"
```

***

## Paquete Reassociation Request

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==2"
```

***

## Paquete Reassociation Response

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==3"
```

***

## Paquete Probe Request

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==4"
```

***

## Paquete Probe Response

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==5"
```

***

## Paquete Beacon

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==8"
```

***

## Paquete ATIM (Announcement Traffic Indication Message)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==9"
```

***

## Paquete Desassociation

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==10"
```

***

## Paquete Authentication

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==11"
```

***

## Paquete Desauthentication

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==12"
```

***

## Paquete Action

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==13"
```

***

## Paquete RTS (Request to Send)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==27"
```

***

## Paquete CTS (Clear to Send)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==28"
```

***

## Paquete ACK (Acknowledgment)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==29"
```

***

## Paquete BAR (Block Acknowledgment Request)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==32"
```

***

## Paquete BA (Block Acknowledgment)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==33"
```

***

## Paquete PS-Poll (Power Save-Poll)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==34"
```

***

## Paquete CF-End (Contention-Free End)

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==38"
```

***

## Paquete CF-End + CF-ACK

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==39"
```

***

## Paquete QoS

```bash
tshark -r traffic_file.cap -Y "wlan.fc.type_subtype==40"
```

***
