Re: CCMP decrypt errors

On Fri, 2006-09-15 at 08:01 +0200, Michael Gwin wrote:
> 07:54:14.172200 00:0f:b5:XX:XX:XX > 01:80:c2:00:00:00, 802.3, length
> 60: LLC, dsap STP (0x42), ssap STP (0x42), cmd 0x03, 802.1d config
> 8000.00:0f:b5:XX:XX:XX.8002 root 8000.00:0f:b5:XX:XX:XX pathcost 0 age
> 0 max 20 hello 2 fdelay 1
> 
> As you can see, this is sent to ethernet address 01:80:c2:00:00:00
> (IEEE 802.1D MAC Bridge Filtered MAC Group Address) but traffic sent to
> ff:ff:ff:ff:ff:ff produces the same result. Normal traffic (i.e.
> unicast ethernet addresses) gets through fine. 
> 
> ifconfig eth0 on the client shows dropped packets due to errors:
> 
> eth0      Link encap:Ethernet  HWaddr 00:12:F0:YY:YY:YY  
>           inet addr:Y.Y.Y.Y  Bcast:Y.Y.Y.Y  Mask:Y.Y.Y.Y
>           UP BROADCAST NOTRAILERS RUNNING MULTICAST  MTU:1500  Metric:1
>           RX packets:12513 errors:855 dropped:855 overruns:0 frame:0
>           TX packets:7843 errors:0 dropped:0 overruns:0 carrier:0
>           collisions:0 txqueuelen:1000 
>           RX bytes:6746360 (6.4 Mb)  TX bytes:958644 (936.1 Kb)
>           Interrupt:5 Base address:0x4000 Memory:fafff000-faffffff

You also use CCMP for Group communication, right? The wpa_supplicant log
might be helpful. The hostap needs also to have the same config.

I wonder if hwcrypto=1 works (work means it can decrypt broadcast
packets). 

Thanks,
-yi

-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642