MAC specific deauthentication message

[John Dowd]

Sorry to be a squeaky wheel here but I really need this to be worked out.

On the hostapd 0.6.9 application, I've managed to use a wireless USB dongle to 
be the i/f for the AP. I have setup a laptop using another wireless USB dongle 
to just connect to my hostapd machine at it works just fine. The client laptop 
gets a DHCP discovered address and it can see my small network through the AP 
being hosted by hostapd.

I have another device that is suppose to do exactly the same thing. It does 
start it's WPA authentication and I can see the following messages in the log:

Sep 15 11:23:59 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: 
authenticated
Sep 15 11:23:59 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: 
authenticated
Sep 15 11:24:22 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: 
authenticated
Sep 15 11:24:22 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: 
associated (aid 2)
Sep 15 11:24:22 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b WPA: received 
EAPOL-Key 2/4 Pairwise with unexpected replay counter
Sep 15 11:24:23 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b RADIUS: 
starting accounting session 4AAFAE50-00000002
Sep 15 11:24:23 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b WPA: pairwise 
keyhandshake completed (RSN)
Sep 15 11:24:23 linux-ivvo hostapd: wlan0: STA 00:12:cf:8f:06:6b WPA: received 
EAPOL-Key 4/4 Pairwise with unexpected replay counter

At this point I had thought that at least the AP was connected to and now 
ready for the DHCP interaction.

Sep 15 11:30:04 linux-ivvo dhcpd: DHCPDISCOVER from 00:12:cf:8f:06:6b via 
wlan0
Sep 15 11:30:04 linux-ivvo dhcpd: DHCPOFFER on 192.168.1.20 to 
00:12:cf:8f:06:6b via wlan0
Sep 15 11:30:07 linux-ivvo dhcpd: DHCPDISCOVER from 00:12:cf:8f:06:6b via 
wlan0
Sep 15 11:30:07 linux-ivvo dhcpd: DHCPOFFER on 192.168.1.20 to 
00:12:cf:8f:06:6b via wlan0
Sep 15 11:30:07 linux-ivvo dhcpd: DHCPDISCOVER from 00:12:cf:8f:06:6b via 
wlan0
Sep 15 11:30:07 linux-ivvo dhcpd: DHCPOFFER on 192.168.1.20 to 
00:12:cf:8f:06:6b via wlan0
802.11: authenticated
wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: associated (aid 2)
wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: deauthenticated due to local deauth 
request
wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: authenticated
wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: associated (aid 2)
wlan0: STA 00:12:cf:8f:06:6b IEEE 802.11: deauthenticated due to local deauth 
request

As the log shows, the dhcp server keeps serving up an IP address but at the 
client end, it never sees it and does not send an ACK. This is probably a 
client issue.

However, the deauthentication message are seen starting up at the end of the 
log that I've shown here. It will go on forever with about an interval of a 
little under 4 seconds.

While this is going on, the other laptop client remains connected to the AP. 
This deauthorization message is specific to the MAC address  
00:12:cf:8f:06:6b. I have not used the hostapd.allow/deny files to restrict 
access. I do have the hostapd.accept file configured with the MAC address of  
00:12:cf:8f:06:6b. In that file is NOT the laptop's MAC address but it 
connects and stays connected with no apparent problems.

Cheers!!
-- 
"To Err is human, to forgive is NOT company policy."

John Dowd
S/W Contractor
email: jdowd at gmail dot com
Cell: (613)316-7884
Home: (613)234-7884
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: This is a digitally signed message part.
Url : http://lists.shmoo.com/pipermail/hostap/attachments/20090915/ab516092/attachment.pgp