On 13 09:03:54, Denis Kenzior wrote: > Hi Jan, > > > > > There is a an SAE confirm sent by the AP. It's frame 170 in > > capture2.pcapng. It's also retried a number of times after that. > > > > What I also find interesting is that the kernel on the client side reports > sending the Authenticate-Confirm 3 times (according to dmesg and > trace2.dat), but only a single Confirm from the client is seen in the air > trace. I'm guessing the retransmissions (attempt 2 & 3) are lost somehow?. Yes this is weird. On my first capture I did see those additional confirm frames from the client (frame 4007 and 4052 in capture.pcapng). So maybe the capture device missed them in the second capture? Although the RSSIs look good in the 2nd capture. > > [64414.164169] wlan0: send auth to 96:2a:6f:b6:d7:9f (try 2/3) > [64415.063575] iwlwifi 0000:00:14.3: Not associated and the session > protection is over already... > [64415.063668] wlan0: Connection to AP 96:2a:6f:b6:d7:9f lost > [64416.215729] wlan0: send auth to 96:2a:6f:b6:d7:9f (try 3/3) > > Regards, > -Denis