On 13 16:19:08, Jan Hendrik Farr wrote: > On 13 09:03:54, Denis Kenzior wrote: > > Hi Jan, > > > > > > > > There is a an SAE confirm sent by the AP. It's frame 170 in > > > capture2.pcapng. It's also retried a number of times after that. > > > > > > > What I also find interesting is that the kernel on the client side reports > > sending the Authenticate-Confirm 3 times (according to dmesg and > > trace2.dat), but only a single Confirm from the client is seen in the air > > trace. I'm guessing the retransmissions (attempt 2 & 3) are lost somehow?. > > Yes this is weird. On my first capture I did see those additional > confirm frames from the client (frame 4007 and 4052 in capture.pcapng). Correction frame 879 and 940. Those other frame number were from another capture I didn't send. > So maybe the capture device missed them in the second capture? Although > the RSSIs look good in the 2nd capture. > > > > > [64414.164169] wlan0: send auth to 96:2a:6f:b6:d7:9f (try 2/3) > > [64415.063575] iwlwifi 0000:00:14.3: Not associated and the session > > protection is over already... > > [64415.063668] wlan0: Connection to AP 96:2a:6f:b6:d7:9f lost > > [64416.215729] wlan0: send auth to 96:2a:6f:b6:d7:9f (try 3/3) > > > > Regards, > > -Denis
