On 01/22/2010 06:16 AM, Cliff Frey wrote: > Also, wifi_header + llc is probably more than 8 bytes... Right, wifidecap pulls 26 + 8 bytes and pushes 14 bytes, while athdescdecap pulls 32 bytes, which means that neither of them is modifying the alignment. right?