<html>
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">On 12-11-18 06:16 AM, Jouni Malinen
wrote:<br>
</div>
<blockquote cite="mid:20121118111640.GB3764@w1.fi" type="cite">
<pre wrap="">On Fri, Nov 16, 2012 at 12:11:53PM -0500, Jonathan Bagg wrote:
</pre>
<blockquote type="cite">
<pre wrap="">Question about TKIP countermeasures in wpa_supplicant....After three
"Event MICHAEL_MIC_FAILURE (2) received" I see wpa_supplicant say "TKIP
countermeasures started", and then disconnects, but never reconnects
after 60 seconds (5.2.17 step #8 in Wi-Fi CERTIFIED n System
Interoperability Test Plan) Running wpa_supplicant v1.0
</pre>
</blockquote>
<pre wrap="">This works fine in my tests.. When wpa_supplicant initiated TKIP
countermeasures, it disconnected, added the BSSID of the AP into
blacklist, and started scanning. After 60 seconds, TKIP countermeasures
were stopped and the next scan was allowed to clear the blacklist. At
this point, connection went through with the same AP.
</pre>
<blockquote type="cite">
<pre wrap="">Is wpa_supplicant supposed to handle the reconnect or is it up to the
user / higher level software?
</pre>
</blockquote>
<pre wrap="">Yes, wpa_supplicant is supposed to find another AP (if available and
enabled in configuration) or connect back to the same AP after 60
seconds.</pre>
</blockquote>
Thank you for the info.<br>
<blockquote cite="mid:20121118111640.GB3764@w1.fi" type="cite">
<pre wrap="">Which driver are you using? How do you configure ap_scan parameter in
wpa_supplicant? Could you please send wpa_supplicant debug log with
timestamps (-dt on command line) from a case where there was no
connection?</pre>
</blockquote>
supplicant output -> <a class="moz-txt-link-freetext"
href="http://upgrade.nadelectronics.com/wifi/wpa_log_2.txt">http://upgrade.nadelectronics.com/wifi/wpa_log_2.txt</a><br>
packet sniff -> <a class="moz-txt-link-freetext"
href="http://upgrade.nadelectronics.com/wifi/all-2.pkt">http://upgrade.nadelectronics.com/wifi/all-2.pkt</a><br>
<br>
cw1200 (Sony-Ericson chipset)Â The driver hasn't made it to the
kernel yet. To my knowledge, we are not configuring the ap_scan
parameter. It appears that the device is trying to reconnect right
after the countermeasures disconnect but fails, and after 60
seconds, it doesn't not attempt to connect. Unfortunately I don't
know how to simulate MIC failures, so we are relaying on the test
lab. wpa_supplicant was started with....<br>
<br>
<font color="black" face="新細明體" size="3"><span
style="font-size:12.0pt" lang="EN-US">wpa_supplicant -D nl80211
-i wlan0 -c /var/data/wpa.conf -dt > /var/log/wpa_log_2.txt
&</span></font><br>
<br>
The <font color="black" face="新細明體" size="3"><span
style="font-size:12.0pt" lang="EN-US">wpa.conf file wouldn't be
much different than <font size="3">what is below with<font
size="3"> a different SSID and psk<font size="3">.</font></font></font></span></font><br>
network={<br>
ssid="wifi_test"<br>
scan_ssid=1<br>
key_mgmt=WPA-PSK<br>
pairwise=CCMP<br>
group=CCMP<br>
psk=7d1bb2eb6f8cbc74a6ad97e90fe02498fa610bac1628778e8d5ddac2c57f88d9<br>
}<br>
<br>
Jon<br>
<br>
</body>
</html>