When interpreting wireless captures it is not always easy to capture the data frames because they are usually sent with complex modulation and coding schemes. The quality of the capturing NIC is also important.
But management and control frames are easier to capture because they are sent with legacy frame format (802.11b/g or 802.11a).
The BlockAcknowledge frame (BA) is the frame used by the receiving station to send back to the transmitter the status for what the receiver has received without corruption.
The last two years I have seen two different behaviors for the BA, one according to the standard and the other with a strange behavior
Let us dig into it
