| Beacon Frames | (wlan.fc.type == 0) && (wlan.fc.type_subtype == 8) |
| Probe Request frames from the client | (wlan.fc.type == 0) && (wlan.fc.type_subtype == 4) |
| Probe request frames from the AP | (wlan.fc.type == 0) && (wlan.fc.type_subtype == 5) |
| Authentication Request and Response | (wlan.fc.type == 0) && (wlan.fc.type_subtype == 11) |
| Association Request from the station | (wlan.fc.type == 0) && (wlan.fc.type_subtype == 0) |
| Association response | (wlan.fc.type == 0) && (wlan.fc.type_subtype == 1) |
| View Eaopol frames | eapol |
| Disassosiation and deauthentication frames | (wlan.fc.type == 0) && (wlan.fc.type_subtype == 12) or (wlan.fc.type_subtype == 10) |