Hey,<div><br></div><div>Cheers for the suggestion. The reason we are using 0.6.6 is because it is the most recent version compiled for OpenWRT. There is a more recent version number (0.6.9) but it was not the most recently updated. Also it exhibits the same problem.</div>
<div><br>We couldnt get the very latest hostapd (v0.7.3) to compile for mips. The patch mentioned does appear to address the problem we are seeing but the diff'd files are not the same. We have manually cludged the seemingly appropriate functions in beacon.c, hostapd.h and wps_hostapd.c in 0.6.6 but the changes didnt seem to stop the leaked beacons.</div>
<div><br></div><div>Any other suggestions or have we just hit an impasse?</div><div><br></div><div>J<br><br><div class="gmail_quote">On 20 March 2012 20:41, Jouni Malinen <span dir="ltr"><<a href="mailto:j@w1.fi">j@w1.fi</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="im">On Tue, Mar 20, 2012 at 02:40:39PM +0000, Jonny Milliken wrote:<br>
> Having a problem with hostapd-mini (v 0.6.6) in OpenWRT Kamikaze 0.8.2. We<br>
> have set up a few APs with WPA encryption and have an IDS (Kismet)<br>
> monitoring for attacks. Kismet is reporting CRYPTODROP false positives<br>
> because when wifi restarts (via "wifi" terminal command) a few beacons are<br>
> transmitted advertising the AP as unencrypted before hostapd fully engages<br>
> and changes the beacons to advertise it as WPA encrypted. We have confirmed<br>
> this is the case with Wireshark. We have managed to root cause the false<br>
> positive to being caused by the line:<br>
<br>
</div><div class="im">> Does anyone know of any way to ensure that hostapd does not leak these few<br>
> unencrypted beacons when it is initialised?<br>
<br>
</div>Upgrading to a newer hostapd version could help:<br>
<br>
<a href="http://w1.fi/gitweb/gitweb.cgi?p=hostap.git;a=commitdiff;h=bc45d4279f01e3c224f78d93b6fd781dab928dde" target="_blank">http://w1.fi/gitweb/gitweb.cgi?p=hostap.git;a=commitdiff;h=bc45d4279f01e3c224f78d93b6fd781dab928dde</a><br>
<span class="HOEnZb"><font color="#888888"><br>
--<br>
Jouni Malinen PGP id EFC895FA<br>
_______________________________________________<br>
HostAP mailing list<br>
<a href="mailto:HostAP@lists.shmoo.com">HostAP@lists.shmoo.com</a><br>
<a href="http://lists.shmoo.com/mailman/listinfo/hostap" target="_blank">http://lists.shmoo.com/mailman/listinfo/hostap</a><br>
</font></span></blockquote></div><br></div>