Management frames in 0.0.4
Petr Novak
pen at dobnet.cz
Wed Oct 15 03:02:32 EDT 2003
> I was a bit unclear there.. The MAC clock is exactly the timestamp I
> want, so that part was fine. The part that was missing the a full
> authentication transaction starting with the first authentication frame
> from the STA to AP and followed by ACK, another auth frame (AP->STA),
> and then something (in theory, ACK). The second sniffer log did not
> include such a frame sequence. It started with the second auth frame and
> ended with the first of another authentication attempt, so neither one
> was completely included.
Oops, sorry, my fault, please find another excerpt of that big file, now
hopefully cut in a meaningful way.
Sniffed frame: status 0000 mactime=945463405
silence=171 signal=186 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=838
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945463707
silence=171 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=580
RA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945464485
silence=170 signal=187 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=838
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 00 00 01 00 00 00
Sniffed frame: status 0000 mactime=945464787
silence=170 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=580
RA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945465465
silence=171 signal=186 rate=20 rxflow=0
FC=0x00b0 mgmt::authentication pver=0
dur=258 frag#=0 seq#=3587
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945465824
silence=171 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 01 00 0a 00 00 06 44 4f 42 2d 30 33 01 04 82 84 0b 16
Sniffed frame: status 0000 mactime=945466255
silence=170 signal=187 rate=20 rxflow=0
FC=0x0000 mgmt::association_request pver=0
AID_in_PS-Poll=1110 frag#=0 seq#=3977
DA=00:60:b3:6b:6c:07 SA=00:60:b3:6b:a9:4d BSSID=00:60:b3:6b:6c:07
Association request frame body:
Capability information: 0x0001 ESS
Listen interval: 10
ElemID #0 (Service Set Identify (SSID)):
len=6 444f422d3033 = DOB-03
ElemID #1 (Supported rates):
len=4 82840b16 = (Mbit/s) BSSBasicRateSet: 1 2 Others: 5.5 11
Sniffed frame: status 0000 mactime=945466650
silence=170 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:a9:4d
data: 34 2a b3 04 00 00 00 00 64 00 01 00 00 06 44 4f 42 2d 30 33 01 04 82
84 0b 16 03 01 01 05 04 00 01 00 00
Sniffed frame: status 0000 mactime=945467540
silence=170 signal=186 rate=20 rxflow=0
FC=0x08b0 mgmt::authentication pver=0 retry
dur=258 frag#=0 seq#=3587
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945467899
silence=170 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945470217
silence=171 signal=186 rate=20 rxflow=0
FC=0x08b0 mgmt::authentication pver=0 retry
dur=258 frag#=0 seq#=3587
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945470576
silence=171 signal=188 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945473994
silence=171 signal=186 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=854
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945474297
silence=171 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=596
RA=00:60:b3:6b:6c:07
data: 01 00 0a 00 00 06 44 4f 42 2d 30 33 01 04 82 84 0b 16
Sniffed frame: status 0000 mactime=945476894
silence=170 signal=186 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=854
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 01 00 0a 00 00 06 44 4f 42 2d 30 33 01 04 82 84 0b 16
Sniffed frame: status 0000 mactime=945477196
silence=170 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=596
RA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945478154
silence=170 signal=186 rate=20 rxflow=0
FC=0x00c0 mgmt::deauthentication pver=0
dur=258 frag#=0 seq#=3588
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Deauthentication frame body:
Status code: 9=Station requesting (re)association is not authenticated with
responding station
Sniffed frame: status 0000 mactime=945478497
silence=170 signal=188 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 00 00 01 00 00 00
Sniffed frame: status 0000 mactime=945479567
silence=170 signal=188 rate=20 rxflow=0
FC=0x00b0 mgmt::authentication pver=0
dur=reserved? frag#=0 seq#=3978
DA=00:60:b3:6b:6c:07 SA=00:60:b3:6b:a9:4d BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 01 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 1
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945479915
silence=170 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:a9:4d
data: 09 00
Sniffed frame: status 0000 mactime=945480625
silence=170 signal=187 rate=20 rxflow=0
FC=0x08c0 mgmt::deauthentication pver=0 retry
dur=258 frag#=0 seq#=3588
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Deauthentication frame body:
Status code: 9=Station requesting (re)association is not authenticated with
responding station
Sniffed frame: status 0000 mactime=945480968
silence=170 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945481369
silence=170 signal=178 rate=20 rxflow=0
FC=0x0040 mgmt::probe_request pver=0
dur=0 frag#=0 seq#=1911
DA=ff:ff:ff:ff:ff:ff SA=00:60:b3:6b:a9:91 BSSID=ff:ff:ff:ff:ff:ff
Probe request frame body:
ElemID #0 (Service Set Identify (SSID)):
len=6 444f422d3033 = DOB-03
ElemID #1 (Supported rates):
len=4 82840b16 = (Mbit/s) BSSBasicRateSet: 1 2 Others: 5.5 11
Sniffed frame: status 0000 mactime=945482475
silence=170 signal=186 rate=20 rxflow=0
FC=0x08c0 mgmt::deauthentication pver=0 retry
dur=258 frag#=0 seq#=3588
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Deauthentication frame body:
Status code: 9=Station requesting (re)association is not authenticated with
responding station
Sniffed frame: status 0000 mactime=945482818
silence=170 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945483656
silence=170 signal=187 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=838
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 00 00 01 00 00 00
Sniffed frame: status 0000 mactime=945483958
silence=170 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=580
RA=00:60:b3:6b:6c:07
data: 00 00 01 00 00 00
Sniffed frame: status 0000 mactime=945488855
silence=171 signal=186 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=838
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945489157
silence=171 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=580
RA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945489895
silence=170 signal=187 rate=20 rxflow=0
FC=0x0050 mgmt::probe_response pver=0
dur=258 frag#=0 seq#=3589
DA=00:60:b3:6b:a9:91 SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Probe response frame body:
Timestamp: 0000000004b457
Beacon interval: 100
Capability information: 0x0001 ESS
ElemID #0 (Service Set Identify (SSID)):
len=6 444f422d3033 = DOB-03
ElemID #1 (Supported rates):
len=4 82840b16 = (Mbit/s) BSSBasicRateSet: 1 2 Others: 5.5 11
ElemID #3 (DS Parameter Set):
len=1 01 = Current_Channel=1
Sniffed frame: status 0000 mactime=945490356
silence=170 signal=177 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945491594
silence=171 signal=186 rate=20 rxflow=0
FC=0x0850 mgmt::probe_response pver=0 retry
dur=258 frag#=0 seq#=3589
DA=00:60:b3:6b:a9:91 SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Probe response frame body:
Timestamp: 0000000004b45e
Beacon interval: 100
Capability information: 0x0001 ESS
ElemID #0 (Service Set Identify (SSID)):
len=6 444f422d3033 = DOB-03
ElemID #1 (Supported rates):
len=4 82840b16 = (Mbit/s) BSSBasicRateSet: 1 2 Others: 5.5 11
ElemID #3 (DS Parameter Set):
len=1 01 = Current_Channel=1
Sniffed frame: status 0000 mactime=945494413
silence=171 signal=187 rate=20 rxflow=0
FC=0x0850 mgmt::probe_response pver=0 retry
dur=258 frag#=0 seq#=3589
DA=00:60:b3:6b:a9:91 SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Probe response frame body:
Timestamp: 0000000004b469
Beacon interval: 100
Capability information: 0x0001 ESS
ElemID #0 (Service Set Identify (SSID)):
len=6 444f422d3033 = DOB-03
ElemID #1 (Supported rates):
len=4 82840b16 = (Mbit/s) BSSBasicRateSet: 1 2 Others: 5.5 11
ElemID #3 (DS Parameter Set):
len=1 01 = Current_Channel=1
Sniffed frame: status 0000 mactime=945494874
silence=171 signal=178 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 00 00 01 00 00 00
Sniffed frame: status 0000 mactime=945499012
silence=170 signal=187 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=946
RA=00:60:b3:6b:a9:91 TA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945499325
silence=170 signal=179 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=688
RA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945502802
silence=171 signal=187 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=946
RA=00:60:b3:6b:a9:91 TA=00:60:b3:6b:6c:07
data: 01 00 0a 00 00 06 44 4f 42 2d 30 33 01 04 82 84 0b 16
Sniffed frame: status 0000 mactime=945503114
silence=171 signal=178 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=688
RA=00:60:b3:6b:6c:07
data: 01 00 0a 00 00 06 44 4f 42 2d 30 33 01 04 82 84 0b 16
Sniffed frame: status 0000 mactime=945504301
silence=171 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:3a:67
data: 34 2a b3 04 00 00 00 00 64 00 01 00 00 06 44 4f 42 2d 30 33 01 04 82
84 0b 16 03 01 01 05 04 00 01 00 00
Sniffed frame: status 0000 mactime=945504612
silence=171 signal=186 rate=20 rxflow=0
FC=0x00b0 mgmt::authentication pver=0
dur=258 frag#=0 seq#=3590
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945504971
silence=171 signal=188 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945505283
silence=170 signal=187 rate=20 rxflow=0
FC=0x0000 mgmt::association_request pver=0
AID_in_PS-Poll=1110 frag#=0 seq#=3979
DA=00:60:b3:6b:6c:07 SA=00:60:b3:6b:a9:4d BSSID=00:60:b3:6b:6c:07
Association request frame body:
Capability information: 0x0001 ESS
Listen interval: 10
ElemID #0 (Service Set Identify (SSID)):
len=6 444f422d3033 = DOB-03
ElemID #1 (Supported rates):
len=4 82840b16 = (Mbit/s) BSSBasicRateSet: 1 2 Others: 5.5 11
Sniffed frame: status 0000 mactime=945505678
silence=170 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:a9:4d
data: 00 00 02 00 00 00
Sniffed frame: status 0000 mactime=945507008
silence=170 signal=186 rate=20 rxflow=0
FC=0x08b0 mgmt::authentication pver=0 retry
dur=258 frag#=0 seq#=3590
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945507367
silence=170 signal=187 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 01 00 0a 00 00 06 44 4f 42 2d 30 33 01 04 82 84 0b 16
Sniffed frame: status 0000 mactime=945509165
silence=170 signal=186 rate=20 rxflow=0
FC=0x08b0 mgmt::authentication pver=0 retry
dur=258 frag#=0 seq#=3590
DA=00:60:b3:6b:a9:4d SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945509524
silence=170 signal=188 rate=20 rxflow=0
FC=0x00d4 ctrl::acknowledgement pver=0
dur=0
RA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945514302
silence=170 signal=187 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=854
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945514604
silence=170 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=596
RA=00:60:b3:6b:6c:07
data: 00 00 01 00 00 00
Sniffed frame: status 0000 mactime=945519842
silence=171 signal=186 rate=20 rxflow=0
FC=0x00b4 ctrl::request_to_send pver=0
dur=854
RA=00:60:b3:6b:a9:4d TA=00:60:b3:6b:6c:07
data: 00 00 01 00 00 00
Sniffed frame: status 0000 mactime=945520145
silence=171 signal=187 rate=20 rxflow=0
FC=0x00c4 ctrl::clear_to_send pver=0
dur=596
RA=00:60:b3:6b:6c:07
data: 09 00
Sniffed frame: status 0000 mactime=945521062
silence=170 signal=187 rate=20 rxflow=0
FC=0x0080 mgmt::beacon pver=0
dur=0 frag#=0 seq#=3591
DA=ff:ff:ff:ff:ff:ff SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Beacon frame body:
Timestamp: 0000000004b4d1
Beacon interval: 100
Capability information: 0x0001 ESS
ElemID #0 (Service Set Identify (SSID)):
len=6 444f422d3033 = DOB-03
ElemID #1 (Supported rates):
len=4 82840b16 = (Mbit/s) BSSBasicRateSet: 1 2 Others: 5.5 11
ElemID #3 (DS Parameter Set):
len=1 01 = Current_Channel=1
ElemID #5 (TIM):
len=4 00010000 = DTIM_Count=0 DTIM_Period=1 Bitmap_Control=0x00
Partial Virtual Bitmap: 00
Sniffed frame: status 0000 mactime=945521988
silence=170 signal=186 rate=20 rxflow=0
FC=0x00b0 mgmt::authentication pver=0
dur=258 frag#=0 seq#=3592
DA=00:60:b3:6b:3a:67 SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945525213
silence=170 signal=187 rate=20 rxflow=0
FC=0x08b0 mgmt::authentication pver=0 retry
dur=258 frag#=0 seq#=3592
DA=00:60:b3:6b:3a:67 SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
Sniffed frame: status 0000 mactime=945528928
silence=171 signal=187 rate=20 rxflow=0
FC=0x08b0 mgmt::authentication pver=0 retry
dur=258 frag#=0 seq#=3592
DA=00:60:b3:6b:3a:67 SA=00:60:b3:6b:6c:07 BSSID=00:60:b3:6b:6c:07
Authentication frame body:
00 00 02 00 00 00
Authentication Algorithm Number: 0=Open System
Authentication Transaction Number: 2
Status code: 0=Successful
--
Petr Novak
pen at dobnet.cz
+420 776 204 526
+420 603 870 101
More information about the HostAP
mailing list