CCMP: replay detected

[Jouni Malinen]

On Tue, Sep 20, 2005 at 11:41:41AM -0400, Jason Carr wrote:

> I got this, it's the only thing keeping me from having a wireless link
> stay up the whole night (I've had a huge list of problems I've finally
> sorted out).
> 
> This happened randomly at around 5:30am.  Is there a way to prevent this
> from happening?  I'd rather my MAC not get banned for 60 seconds (or
> whatever the "ban" time is for replay attacks) every night.  It
> generally kills my connection to the outside world.

Do you mean that this is breaking the connection completely? For how
long a time?

> CCMP: replay detected: STA=00:12:f0:34:60:7f previous PN 000000000080
> received PN 000000000001

CCMP does not have anything like TKIP countermeasures which would be
blocking the stations.. Packets with replayed PN are just being dropped.
The station can continue using the network after this without any wait
period, as long as the PN is correct (i.e., larger than anything
previously used with the current key).

-- 
Jouni Malinen                                            PGP id EFC895FA