Re: CCMP decrypt errors

On Fri, 15 Sep 2006 11:11:49 +0800
Zhu Yi <[email protected]> wrote:


> Have you tried a real AP?

Unfortunately, I don't have one available. 


> Can you attach the dmesg output?


CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 2 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 1 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 2 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 1 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 2 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 1 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 2 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 1 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 2 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 1 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX
printk: 2 messages suppressed.
CCMP: decrypt failed: STA=00:0f:b5:XX:XX:XX

A tcpdump on the access point shows the following packet being sent
over the wireless interface every time one of the "decrypt failed"
messages is produced on the client:

07:54:14.172200 00:0f:b5:XX:XX:XX > 01:80:c2:00:00:00, 802.3, length
60: LLC, dsap STP (0x42), ssap STP (0x42), cmd 0x03, 802.1d config
8000.00:0f:b5:XX:XX:XX.8002 root 8000.00:0f:b5:XX:XX:XX pathcost 0 age
0 max 20 hello 2 fdelay 1

As you can see, this is sent to ethernet address 01:80:c2:00:00:00
(IEEE 802.1D MAC Bridge Filtered MAC Group Address) but traffic sent to
ff:ff:ff:ff:ff:ff produces the same result. Normal traffic (i.e.
unicast ethernet addresses) gets through fine. 

ifconfig eth0 on the client shows dropped packets due to errors:

eth0      Link encap:Ethernet  HWaddr 00:12:F0:YY:YY:YY  
          inet addr:Y.Y.Y.Y  Bcast:Y.Y.Y.Y  Mask:Y.Y.Y.Y
          UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500  Metric:1
          RX packets:12513 errors:855 dropped:855 overruns:0 frame:0
          TX packets:7843 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:1000 
          RX bytes:6746360 (6.4 Mb)  TX bytes:958644 (936.1 Kb)
          Interrupt:5 Base address:0x4000 Memory:fafff000-faffffff

Anything else I can send?

Thanks,
Mike

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642