An encrypted frame body — cipher header, ciphertext, and message integrity code.
Reading a capture
Sixteen octets of overhead on every protected frame, which is why security is not free in airtime terms. On short frames it is a substantial fraction of what is transmitted.
Subfields
CCMP Header — Carries the packet number used to build the nonce, and identifies which key was used.
MIC — Message integrity code covering the payload and parts of the header.