guess password (and verbose debugging)

[Jouni Malinen]

On Mon, Mar 02, 2015 at 08:21:13PM +0100, Pol Hallen wrote:
> Mar  2 16:04:27 server1 hostapd: wlan1: STA 98:0c:82:a8:e8:01 RADIUS:
> starting accounting session 54D75B33-00000037
> Mar  2 16:04:27 server1 hostapd: wlan1: STA 98:0c:82:a8:e8:01 WPA:
> pairwise key handshake completed (RSN)
> Mar  2 16:04:50 server1 hostapd: wlan1: STA 98:0c:82:a8:e8:01 IEEE 802.11:
> disassociated

> does "RADIUS: starting accounting session 54D75B33-00000037" and "WPA:
> pairwise key handshake completed (RSN)" mean a client successfully
> autheticated inside my lan? (I wish no) because no one of my clients has
> that mac address :-/

Those entries get logged at the completion of a successful 4-way
handshake and authorization of the port, so yes, it would reasonable to
assume that that device was connected to the network for about 23
seconds.

-- 
Jouni Malinen                                            PGP id EFC895FA