From owner-freebsd-wireless@FreeBSD.ORG Fri Jun 15 09:02:46 2012 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (unknown [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2F35B1065672; Fri, 15 Jun 2012 09:02:46 +0000 (UTC) (envelope-from monthadar@gmail.com) Received: from mail-wi0-f170.google.com (mail-wi0-f170.google.com [209.85.212.170]) by mx1.freebsd.org (Postfix) with ESMTP id 880DD8FC14; Fri, 15 Jun 2012 09:02:45 +0000 (UTC) Received: by wibhm6 with SMTP id hm6so156239wib.1 for ; Fri, 15 Jun 2012 02:02:39 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=dTn/yjsjgyPn7q1UTGH15LA6MibGR7vGevCpnJIHRtg=; b=rM50CXKnXuKdYjnJZg1Ky016Exmykh1PdCDXSgqchHWoD8LiA8JKCWJ4vGi7NqW3y0 meSze6oknX4yxxOsacj06Qd6TxK7pgPrSCksu+OIQf84yR7gAZXYEbrpncerNk+R3VU0 QlMF828sN+CpqZd3j+iJbfTL0Um4sbBxVJzo3PP4f+uaJFKWc9I0oF3KLuKuc5GhLHY4 7imPJKDqjAiD6O4/9og6uCPuDmCYFrOhGZtp/MgYy5eRBb6H8Io399WntGzwdGdREphb CrQPZgXAQ2dH6FawbkuvNbszQAstmZLID5RPg2MnqOqgLsFN1it4EEK247lB8PgKc1WF ajIg== MIME-Version: 1.0 Received: by 10.180.85.129 with SMTP id h1mr2685623wiz.2.1339750959159; Fri, 15 Jun 2012 02:02:39 -0700 (PDT) Received: by 10.223.158.207 with HTTP; Fri, 15 Jun 2012 02:02:39 -0700 (PDT) In-Reply-To: References: Date: Fri, 15 Jun 2012 11:02:39 +0200 Message-ID: From: Monthadar Al Jaberi To: Adrian Chadd Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-wireless@freebsd.org Subject: Re: AP <-> STA: tcpdump shows duplicate ARP request from STA, but STA only sends one. X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Fri, 15 Jun 2012 09:02:46 -0000 On Mon, Jun 11, 2012 at 6:28 PM, Adrian Chadd wrote: > Hi! > > The "null frame" is from hostap. It sends it out whenever a new > station (re) joins. It's a broadcast frame that's harmless, designed > to "seed" all the switches with the true location of the MAC address. > > As for dup packets, I'm not sure. Hm! mm, its weird the received frame are only tapped once in net80211 from what I can see ... > > > > Adrian Ok, I tried with mesh and they dont recevie these ARP Request at all... hmmm Running two RSPRO as mesh and one RSPRO as monitor I noticed this: Both Mesh nodes sends out ARP Requests ( I verified it by tcpdump). These ARP Requests are seen by the monitor RSPRO: 01:22:38.020700 1357460558us tsft 1.0 Mb/s -28dB signal -96dB noise antenna 1 2442 MHz 11g MeshData (AE 0 TTL 31 seq 1) CF +QoS ARP, Request who-has 192.168.0.22 tell 192.168.0.22, length 28 0x0000: 0000 2000 6708 0400 4e34 e950 0000 0000 ....g...N4.P.... 0x0010: 2002 e4a0 0100 0000 8004 0000 8a09 071b ................ 0x0020: 8802 0000 ffff ffff ffff 0015 6d67 2173 ............mg!s 0x0030: 0015 6d67 2173 0000 00de 00de 001f 0100 ..mg!s.......... 0x0040: 0000 aaaa 0300 0000 0806 0001 0800 0604 ................ 0x0050: 0001 0015 6d67 2173 c0a8 0016 0000 0000 ....mg!s........ 0x0060: 0000 c0a8 0016 ...... 01:22:42.058109 1361496938us tsft 1.0 Mb/s -30dB signal -96dB noise antenna 1 2442 MHz 11g MeshData (AE 0 TTL 31 seq 1) CF +QoS ARP, Request who-has 192.168.0.23 tell 192.168.0.23, length 28 0x0000: 0000 2000 6708 0400 6acb 2651 0000 0000 ....g...j.&Q.... 0x0010: 2002 e2a0 0100 0000 8004 0000 8a09 071b ................ 0x0020: 8802 0000 ffff ffff ffff 0015 6d67 2175 ............mg!u 0x0030: 0015 6d67 2175 0000 00de 00de 001f 0100 ..mg!u.......... 0x0040: 0000 aaaa 0300 0000 0806 0001 0800 0604 ................ 0x0050: 0001 0015 6d67 2175 c0a8 0017 0000 0000 ....mg!u........ 0x0060: 0000 c0a8 0017 ...... I verified that each each mesh node have not recevied the ARP Request by tapping the link level (tcpdump -i wlan0 -y IEEE802_11_RADIO). Are they filtered out in the begining? Do we miss an interrupt? br, -- Monthadar Al Jaberi