Re: mac80211 -- My log files are filling up with: "wlan0: RX non-WEP frame, but expected encryption"

[Johannes Berg <johannes@sipsolutions.net>]

[-- Attachment #1: Type: text/plain, Size: 1446 bytes --]

Hi,

Please copy the mailing list, I've done that now.

> My log files are filling up with these messages:
> 
>        [ 8722.198929] wlan0: RX non-WEP frame, but expected encryption
>        [ 8726.506345] __ratelimit: 14 messages suppressed

> ./rx.c:			printk(KERN_DEBUG "%s: RX non-WEP frame, but expected "


> It seems that others who are using Netgear WPN824 access points are
> also seeing these messages in their logs.
> http://www.intellinuxwireless.org/bugzilla/show_bug.cgi?id=1614
> http://ubuntuforums.org/showthread.php?t=637084
> 
> I am wondering whether this indicates a problem situation with the
> access point that really needs to be reported.  Is this being reported
> because it is a security risk?   Is this a condition that really needs
> to be reported by wireless drivers?

Hm. You shouldn't actually be getting this when your AP is configured to
use encryption. It either points to somebody trying to invade your
network (unlikely) or an AP bug.

Can you use 'iw' to add a new monitor interface and capture some of the
unencrypted packets with that? Use

$ git clone http://git.sipsolutions.net/iw.git/
$ cd iw
$ make

# ./iw dev wmaster0 interface add moni0 type monitor

and then wireshark/tcpdump on it, you can also send me the dump in
private mail if you cannot identify the problem. If you *disable* hw
crypto I won't even be able to read your actual traffic :)

johannes

[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 828 bytes --]