Auth req from client to AP2:

No.     Time           Source                Destination           Protocol Length Info
      4 0.111450       Smartbri_4e:0c:39     Microwav_07:0b:b5     802.11   220    Authentication, SN=1341, FN=0, Flags=........C
IEEE 802.11 Authentication, Flags: ........C
    Type/Subtype: Authentication (0x000b)
    Frame Control Field: 0xb000
        .... ..00 = Version: 0
        .... 00.. = Type: Management frame (0)
        1011 .... = Subtype: 11
        Flags: 0x00
            .... ..00 = DS status: Not leaving DS or network is operating in AD-HOC mode (To DS: 0 From DS: 0) (0x0)
            .... .0.. = More Fragments: This is the last fragment
            .... 0... = Retry: Frame is not being retransmitted
            ...0 .... = PWR MGT: STA will stay up
            ..0. .... = More Data: No data buffered
            .0.. .... = Protected flag: Data is not protected
            0... .... = Order flag: Not strictly ordered
    .000 0001 0011 1010 = Duration: 314 microseconds
    Receiver address: Microwav_07:0b:b5 (00:06:3d:07:0b:b5)
    Destination address: Microwav_07:0b:b5 (00:06:3d:07:0b:b5)
    Transmitter address: Smartbri_4e:0c:39 (00:30:1a:4e:0c:39)
    Source address: Smartbri_4e:0c:39 (00:30:1a:4e:0c:39)
    BSS Id: Microwav_07:0b:b5 (00:06:3d:07:0b:b5)
    .... .... .... 0000 = Fragment number: 0
    0101 0011 1101 .... = Sequence number: 1341
    Frame check sequence: 0xc8db07ef [correct]
    [FCS Status: Good]
IEEE 802.11 wireless LAN management frame
    Fixed parameters (6 bytes)
        Authentication Algorithm: Fast BSS Transition (2)
        Authentication SEQ: 0x0001
        Status code: Successful (0x0000)
    Tagged parameters (148 bytes)
        Tag: RSN Information
            Tag Number: RSN Information (48)
            Tag length: 38
            RSN Version: 1
            Group Cipher Suite: 00-0f-ac (Ieee8021) AES (CCM)
                Group Cipher Suite OUI: 00-0f-ac (Ieee8021)
                Group Cipher Suite type: AES (CCM) (4)
            Pairwise Cipher Suite Count: 1
            Pairwise Cipher Suite List 00-0f-ac (Ieee8021) AES (CCM)
                Pairwise Cipher Suite: 00-0f-ac (Ieee8021) AES (CCM)
                    Pairwise Cipher Suite OUI: 00-0f-ac (Ieee8021)
                    Pairwise Cipher Suite type: AES (CCM) (4)
            Auth Key Management (AKM) Suite Count: 1
            Auth Key Management (AKM) List 00-0f-ac (Ieee8021) FT over IEEE 802.1X
                Auth Key Management (AKM) Suite: 00-0f-ac (Ieee8021) FT over IEEE 802.1X
                    Auth Key Management (AKM) OUI: 00-0f-ac (Ieee8021)
                    Auth Key Management (AKM) type: FT over IEEE 802.1X (3)
            RSN Capabilities: 0x0000
                .... .... .... ...0 = RSN Pre-Auth capabilities: Transmitter does not support pre-authentication
                .... .... .... ..0. = RSN No Pairwise capabilities: Transmitter can support WEP default key 0 simultaneously with Pairwise key
                .... .... .... 00.. = RSN PTKSA Replay Counter capabilities: 1 replay counter per PTKSA/GTKSA/STAKeySA (0x0)
                .... .... ..00 .... = RSN GTKSA Replay Counter capabilities: 1 replay counter per PTKSA/GTKSA/STAKeySA (0x0)
                .... .... .0.. .... = Management Frame Protection Required: False
                .... .... 0... .... = Management Frame Protection Capable: False
                .... ...0 .... .... = Joint Multi-band RSNA: False
                .... ..0. .... .... = PeerKey Enabled: False
            PMKID Count: 1
            PMKID List
                PMKID: 8b005f74adc7caf11c790279ab0a5c73
        Tag: Mobility Domain
            Tag Number: Mobility Domain (54)
            Tag length: 3
            Mobility Domain Identifier: 0x0101
            FT Capability and Policy: 0x01
            .... ...1 = Fast BSS Transition over DS: 0x1
            .... ..0. = Resource Request Protocol Capability: 0x0
        Tag: Fast BSS Transition
            Tag Number: Fast BSS Transition (55)
            Tag length: 101
            MIC Control: 0x0000
            0000 0000 .... .... = Element Count: 0
            MIC: 00000000000000000000000000000000
            ANonce: 000000000000000000000000000000000000000000000000...
            SNonce: 8787d874605dd02515b23848c1c02a3281bd143ac0a45dff...
            Subelement ID: PMK-R0 key holder identifier (R0KH-ID) (3)
            Length: 17
            PMK-R0 key holder identifier (R0KH-ID): 00:c0:69:d0:0d:11


FT auth response from AP2 to client:

No.     Time           Source                Destination           Protocol Length Info
      6 0.800814       Microwav_07:0b:b5     Smartbri_4e:0c:39     802.11   232    Authentication, SN=821, FN=0, Flags=........C

IEEE 802.11 Authentication, Flags: ........C
    Type/Subtype: Authentication (0x000b)
    Frame Control Field: 0xb000
        .... ..00 = Version: 0
        .... 00.. = Type: Management frame (0)
        1011 .... = Subtype: 11
        Flags: 0x00
            .... ..00 = DS status: Not leaving DS or network is operating in AD-HOC mode (To DS: 0 From DS: 0) (0x0)
            .... .0.. = More Fragments: This is the last fragment
            .... 0... = Retry: Frame is not being retransmitted
            ...0 .... = PWR MGT: STA will stay up
            ..0. .... = More Data: No data buffered
            .0.. .... = Protected flag: Data is not protected
            0... .... = Order flag: Not strictly ordered
    .000 0001 0011 1010 = Duration: 314 microseconds
    Receiver address: Smartbri_4e:0c:39 (00:30:1a:4e:0c:39)
    Destination address: Smartbri_4e:0c:39 (00:30:1a:4e:0c:39)
    Transmitter address: Microwav_07:0b:b5 (00:06:3d:07:0b:b5)
    Source address: Microwav_07:0b:b5 (00:06:3d:07:0b:b5)
    BSS Id: Microwav_07:0b:b5 (00:06:3d:07:0b:b5)
    .... .... .... 0000 = Fragment number: 0
    0011 0011 0101 .... = Sequence number: 821
    Frame check sequence: 0xfb1d8b94 [correct]
    [FCS Status: Good]
IEEE 802.11 wireless LAN management frame
    Fixed parameters (6 bytes)
        Authentication Algorithm: Fast BSS Transition (2)
        Authentication SEQ: 0x0002
        Status code: Successful (0x0000)
    Tagged parameters (160 bytes)
        Tag: RSN Information
            Tag Number: RSN Information (48)
            Tag length: 42
            RSN Version: 1
            Group Cipher Suite: 00-0f-ac (Ieee8021) AES (CCM)
                Group Cipher Suite OUI: 00-0f-ac (Ieee8021)
                Group Cipher Suite type: AES (CCM) (4)
            Pairwise Cipher Suite Count: 1
            Pairwise Cipher Suite List 00-0f-ac (Ieee8021) AES (CCM)
                Pairwise Cipher Suite: 00-0f-ac (Ieee8021) AES (CCM)
                    Pairwise Cipher Suite OUI: 00-0f-ac (Ieee8021)
                    Pairwise Cipher Suite type: AES (CCM) (4)
            Auth Key Management (AKM) Suite Count: 2
            Auth Key Management (AKM) List 00-0f-ac (Ieee8021) WPA 00-0f-ac (Ieee8021) FT over IEEE 802.1X
                Auth Key Management (AKM) Suite: 00-0f-ac (Ieee8021) WPA
                    Auth Key Management (AKM) OUI: 00-0f-ac (Ieee8021)
                    Auth Key Management (AKM) type: WPA (1)
                Auth Key Management (AKM) Suite: 00-0f-ac (Ieee8021) FT over IEEE 802.1X
                    Auth Key Management (AKM) OUI: 00-0f-ac (Ieee8021)
                    Auth Key Management (AKM) type: FT over IEEE 802.1X (3)
            RSN Capabilities: 0x000d
                .... .... .... ...1 = RSN Pre-Auth capabilities: Transmitter supports pre-authentication
                .... .... .... ..0. = RSN No Pairwise capabilities: Transmitter can support WEP default key 0 simultaneously with Pairwise key
                .... .... .... 11.. = RSN PTKSA Replay Counter capabilities: 16 replay counters per PTKSA/GTKSA/STAKeySA (0x3)
                .... .... ..00 .... = RSN GTKSA Replay Counter capabilities: 1 replay counter per PTKSA/GTKSA/STAKeySA (0x0)
                .... .... .0.. .... = Management Frame Protection Required: False
                .... .... 0... .... = Management Frame Protection Capable: False
                .... ...0 .... .... = Joint Multi-band RSNA: False
                .... ..0. .... .... = PeerKey Enabled: False
            PMKID Count: 1
            PMKID List
                PMKID: 8b005f74adc7caf11c790279ab0a5c73
        Tag: Mobility Domain
            Tag Number: Mobility Domain (54)
            Tag length: 3
            Mobility Domain Identifier: 0x0101
            FT Capability and Policy: 0x01
            .... ...1 = Fast BSS Transition over DS: 0x1
            .... ..0. = Resource Request Protocol Capability: 0x0
        Tag: Fast BSS Transition
            Tag Number: Fast BSS Transition (55)
            Tag length: 109
            MIC Control: 0x0000
            0000 0000 .... .... = Element Count: 0
            MIC: 00000000000000000000000000000000
            ANonce: 6ee82099761491d6b4848c8635ec6fbb204d483b3730c287...
            SNonce: 8787d874605dd02515b23848c1c02a3281bd143ac0a45dff...
            Subelement ID: PMK-R1 key holder identifier (R1KH-ID) (1)
            Length: 6
            PMK-R1 key holder identifier (R1KH-ID): 00063d070bb5
            Subelement ID: PMK-R0 key holder identifier (R0KH-ID) (3)
            Length: 17
            PMK-R0 key holder identifier (R0KH-ID): 00:c0:69:d0:0d:11

