DSAP

Destination service access point. Always 0xAA when SNAP follows.

Reading a capture

In practice this is a constant. Seeing anything other than 0xAA in a modern data frame is worth a second look.

Where it sits

LPDU > DSAP

• Open in the explorer — TCP over IPv4, in a protected QoS Data frame, aggregated
• Open in the explorer — Four-way handshake message 1
• Open in the explorer — Four-way handshake message 2
• Open in the explorer — Four-way handshake message 3
• Open in the explorer — Four-way handshake message 4
• Open in the explorer — ARP request in a QoS Data frame
• Open in the explorer — ICMP echo over IPv4, in a QoS Data frame
• Open in the explorer — UDP over IPv6, in a QoS Data frame
• Open in the explorer — TCP over IPv4, in a protected QoS Data frame
• Open in the explorer — TCP over IPv4, in an open QoS Data frame
• Open in the explorer — UDP over IPv4, in a QoS Data frame

Accuracy

Clause

IEEE 802.2 §3.2

Verified

Not verified against the standard. Treat this as a claim, not a fact.