D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DIR-655 => Topic started by: midhenry on May 28, 2008, 07:54:05 AM

Title: Deauthentication: what is it, why do I get it?
Post by: midhenry on May 28, 2008, 07:54:05 AM
I still get occasional disconnects due to "deauthentication" (see log below).
What is "deauthentication"?
Under what circumstances does it legitimately occur?

[INFO]   Tue May 27 17:48:51 2008   Blocked incoming UDP packet from 122.141.76.2:33620 to 69.64.229.37:1026
[WARN]   Tue May 27 17:48:47 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.192.
[INFO]   Tue May 27 17:48:42 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:48:40 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:48:39 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:2001 <-> 192.168.0.1964207 UDP 'svchost (192.168.0.196:4207) 2001 UDP'
[INFO]   Tue May 27 17:48:39 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:47:35 2008   Blocked incoming TCP packet from 60.28.164.54:6219 to 69.64.229.37:35934 as RST:ACK received but there is no active connection
[INFO]   Tue May 27 17:47:01 2008   Above message repeated 1 times
[INFO]   Tue May 27 17:45:38 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:2001 <-> 192.168.0.196:4207 UDP timeout:-1 'svchost (192.168.0.196:4207) 2001 UDP'
[INFO]   Tue May 27 17:45:38 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:44750 UDP
[WARN]   Tue May 27 17:45:30 2008   A network computer was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:45:28 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:30:55 2008   Blocked incoming UDP packet from 24.64.108.153:11717 to 69.64.229.37:1027
[INFO]   Tue May 27 17:25:45 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:44750 <-> 192.168.0.196:3778 UDP timeout:-1 'svchost (192.168.0.196:3778) 44750 UDP'
[WARN]   Tue May 27 17:25:36 2008   A network computer was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:25:33 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:25:32 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.1963701 UDP 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:25:32 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:24:50 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.196:3701 UDP timeout:-1 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:24:49 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:6606 UDP
[INFO]   Tue May 27 17:24:44 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.196:3701 UDP timeout:-1 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:24:44 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:56268 UDP
[WARN]   Tue May 27 17:24:35 2008   A network computer was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:24:28 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:14:33 2008   Blocked incoming TCP packet from 60.28.237.31:80 to 69.64.229.37:7743 as SYN:ACK received but there is no active connection
[INFO]   Tue May 27 17:07:12 2008   Blocked incoming UDP packet from 24.64.43.9:12186 to 69.64.229.37:1028
[INFO]   Tue May 27 17:02:36 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:56268 <-> 192.168.0.196:3255 UDP timeout:-1 'svchost (192.168.0.196:3255) 56268 UDP'
[WARN]   Tue May 27 17:02:29 2008   A network computer was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:02:26 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:02:25 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:2508 <-> 192.168.0.1963173 UDP 'svchost (192.168.0.196:3173) 2508 UDP'
[INFO]   Tue May 27 17:02:25 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:01:31 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:2508 <-> 192.168.0.196:3173 UDP timeout:-1 'svchost (192.168.0.196:3173) 2508 UDP'
[WARN]   Tue May 27 17:01:23 2008   A network computer was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:01:20 2008   Wireless system with MAC address 0013CE804B61 associated
[WARN]   Tue May 27 17:00:41 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:00:36 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:00:34 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:60619 <-> 192.168.0.1962944 UDP 'svchost (192.168.0.196:2944) 60619 UDP'
[INFO]   Tue May 27 17:00:34 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1028
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1027
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1026
[INFO]   Tue May 27 16:55:27 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:60619 <-> 192.168.0.196:2944 UDP timeout:-1 'svchost (192.168.0.196:2944) 60619 UDP'
[WARN]   Tue May 27 16:55:20 2008   A network computer was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 16:55:17 2008   Wireless system with MAC address 0013CE804B61 associated
[WARN]   Tue May 27 16:54:49 2008   A network computer [INFO]   Tue May 27 17:48:51 2008   Blocked incoming UDP packet from 122.141.76.2:33620 to 69.64.229.37:1026
[WARN]   Tue May 27 17:48:47 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.192.
[INFO]   Tue May 27 17:48:42 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:48:40 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:48:39 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:2001 <-> 192.168.0.1964207 UDP 'svchost (192.168.0.196:4207) 2001 UDP'
[INFO]   Tue May 27 17:48:39 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:47:35 2008   Blocked incoming TCP packet from 60.28.164.54:6219 to 69.64.229.37:35934 as RST:ACK received but there is no active connection
[INFO]   Tue May 27 17:47:01 2008   Above message repeated 1 times
[INFO]   Tue May 27 17:45:38 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:2001 <-> 192.168.0.196:4207 UDP timeout:-1 'svchost (192.168.0.196:4207) 2001 UDP'
[INFO]   Tue May 27 17:45:38 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:44750 UDP
[WARN]   Tue May 27 17:45:30 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:45:28 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:31:11 2008   Blocked incoming UDP packet from 24.64.29.69:19801 to 69.64.229.37:1028
[INFO]   Tue May 27 17:31:11 2008   Blocked incoming UDP packet from 24.64.29.69:19801 to 69.64.229.37:1027
[INFO]   Tue May 27 17:31:11 2008   Blocked incoming UDP packet from 24.64.29.69:19801 to 69.64.229.37:1026
[INFO]   Tue May 27 17:30:55 2008   Blocked incoming UDP packet from 24.64.108.153:11717 to 69.64.229.37:1028
[INFO]   Tue May 27 17:30:55 2008   Blocked incoming UDP packet from 24.64.108.153:11717 to 69.64.229.37:1026
[INFO]   Tue May 27 17:30:55 2008   Blocked incoming UDP packet from 24.64.108.153:11717 to 69.64.229.37:1027
[INFO]   Tue May 27 17:25:45 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:44750 <-> 192.168.0.196:3778 UDP timeout:-1 'svchost (192.168.0.196:3778) 44750 UDP'
[WARN]   Tue May 27 17:25:36 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:25:33 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:25:32 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.1963701 UDP 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:25:32 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:24:50 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.196:3701 UDP timeout:-1 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:24:49 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:6606 UDP
[INFO]   Tue May 27 17:24:44 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.196:3701 UDP timeout:-1 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:24:44 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:56268 UDP
[WARN]   Tue May 27 17:24:35 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:24:28 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:14:33 2008   Blocked incoming TCP packet from 60.28.237.31:80 to 69.64.229.37:7743 as SYN:ACK received but there is no active connection
[INFO]   Tue May 27 17:07:12 2008   Blocked incoming UDP packet from 24.64.43.9:12186 to 69.64.229.37:1028
[INFO]   Tue May 27 17:07:12 2008   Blocked incoming UDP packet from 24.64.43.9:12186 to 69.64.229.37:1026
[INFO]   Tue May 27 17:07:12 2008   Blocked incoming UDP packet from 24.64.43.9:12186 to 69.64.229.37:1027
[INFO]   Tue May 27 17:02:36 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:56268 <-> 192.168.0.196:3255 UDP timeout:-1 'svchost (192.168.0.196:3255) 56268 UDP'
[WARN]   Tue May 27 17:02:29 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:02:26 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:02:25 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:2508 <-> 192.168.0.1963173 UDP 'svchost (192.168.0.196:3173) 2508 UDP'
[INFO]   Tue May 27 17:02:25 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:01:31 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:2508 <-> 192.168.0.196:3173 UDP timeout:-1 'svchost (192.168.0.196:3173) 2508 UDP'
[WARN]   Tue May 27 17:01:23 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:01:20 2008   Wireless system with MAC address 0013CE804B61 associated
[WARN]   Tue May 27 17:00:41 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:00:36 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:00:34 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:60619 <-> 192.168.0.1962944 UDP 'svchost (192.168.0.196:2944) 60619 UDP'
[INFO]   Tue May 27 17:00:34 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1028
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1027
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1026
[INFO]   Tue May 27 16:55:27 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:60619 <-> 192.168.0.196:2944 UDP timeout:-1 'svchost (192.168.0.196:2944) 60619 UDP'
[WARN]   Tue May 27 16:55:20 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 16:55:17 2008   Wireless system with MAC address 0013CE804B61 associated
[WARN]   Tue May 27 16:54:49 2008   A network computer [INFO]   Tue May 27 17:48:51 2008   Blocked incoming UDP packet from 122.141.76.2:33620 to 69.64.229.37:1026
[WARN]   Tue May 27 17:48:47 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.192.
[INFO]   Tue May 27 17:48:42 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:48:40 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:48:39 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:2001 <-> 192.168.0.1964207 UDP 'svchost (192.168.0.196:4207) 2001 UDP'
[INFO]   Tue May 27 17:48:39 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:47:35 2008   Blocked incoming TCP packet from 60.28.164.54:6219 to 69.64.229.37:35934 as RST:ACK received but there is no active connection
[INFO]   Tue May 27 17:47:01 2008   Above message repeated 1 times
[INFO]   Tue May 27 17:45:38 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:2001 <-> 192.168.0.196:4207 UDP timeout:-1 'svchost (192.168.0.196:4207) 2001 UDP'
[INFO]   Tue May 27 17:45:38 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:44750 UDP
[WARN]   Tue May 27 17:45:30 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:45:28 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:31:11 2008   Blocked incoming UDP packet from 24.64.29.69:19801 to 69.64.229.37:1028
[INFO]   Tue May 27 17:31:11 2008   Blocked incoming UDP packet from 24.64.29.69:19801 to 69.64.229.37:1027
[INFO]   Tue May 27 17:31:11 2008   Blocked incoming UDP packet from 24.64.29.69:19801 to 69.64.229.37:1026
[INFO]   Tue May 27 17:30:55 2008   Blocked incoming UDP packet from 24.64.108.153:11717 to 69.64.229.37:1028
[INFO]   Tue May 27 17:30:55 2008   Blocked incoming UDP packet from 24.64.108.153:11717 to 69.64.229.37:1026
[INFO]   Tue May 27 17:30:55 2008   Blocked incoming UDP packet from 24.64.108.153:11717 to 69.64.229.37:1027
[INFO]   Tue May 27 17:25:45 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:44750 <-> 192.168.0.196:3778 UDP timeout:-1 'svchost (192.168.0.196:3778) 44750 UDP'
[WARN]   Tue May 27 17:25:36 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:25:33 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:25:32 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.1963701 UDP 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:25:32 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:24:50 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.196:3701 UDP timeout:-1 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:24:49 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:6606 UDP
[INFO]   Tue May 27 17:24:44 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:6606 <-> 192.168.0.196:3701 UDP timeout:-1 'svchost (192.168.0.196:3701) 6606 UDP'
[INFO]   Tue May 27 17:24:44 2008   UPnP deleted entry 255.255.255.255 <-> 69.64.229.37:56268 UDP
[WARN]   Tue May 27 17:24:35 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:24:28 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 17:14:33 2008   Blocked incoming TCP packet from 60.28.237.31:80 to 69.64.229.37:7743 as SYN:ACK received but there is no active connection
[INFO]   Tue May 27 17:07:12 2008   Blocked incoming UDP packet from 24.64.43.9:12186 to 69.64.229.37:1028
[INFO]   Tue May 27 17:07:12 2008   Blocked incoming UDP packet from 24.64.43.9:12186 to 69.64.229.37:1026
[INFO]   Tue May 27 17:07:12 2008   Blocked incoming UDP packet from 24.64.43.9:12186 to 69.64.229.37:1027
[INFO]   Tue May 27 17:02:36 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:56268 <-> 192.168.0.196:3255 UDP timeout:-1 'svchost (192.168.0.196:3255) 56268 UDP'
[WARN]   Tue May 27 17:02:29 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:02:26 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:02:25 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:2508 <-> 192.168.0.1963173 UDP 'svchost (192.168.0.196:3173) 2508 UDP'
[INFO]   Tue May 27 17:02:25 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 17:01:31 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:2508 <-> 192.168.0.196:3173 UDP timeout:-1 'svchost (192.168.0.196:3173) 2508 UDP'
[WARN]   Tue May 27 17:01:23 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:01:20 2008   Wireless system with MAC address 0013CE804B61 associated
[WARN]   Tue May 27 17:00:41 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 17:00:36 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 17:00:34 2008   UPnP expired entry 255.255.255.255 <-> 69.64.229.37:60619 <-> 192.168.0.1962944 UDP 'svchost (192.168.0.196:2944) 60619 UDP'
[INFO]   Tue May 27 17:00:34 2008   The DHCP server address 192.168.0.196 was released by the network device - the network device no longer wants to use it.
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1028
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1027
[INFO]   Tue May 27 16:59:51 2008   Blocked incoming UDP packet from 24.64.9.222:30332 to 69.64.229.37:1026
[INFO]   Tue May 27 16:55:27 2008   UPnP added entry 255.255.255.255 <-> 69.64.229.37:60619 <-> 192.168.0.196:2944 UDP timeout:-1 'svchost (192.168.0.196:2944) 60619 UDP'
[WARN]   Tue May 27 16:55:20 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 16:55:17 2008   Wireless system with MAC address 0013CE804B61 associated
[WARN]   Tue May 27 16:54:49 2008   A network computer (TOSHIBA-BARBARA) was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 16:54:42 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 16:54:37 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 16:54:29 2008   Above message repeated 1 times
[INFO]   Tue May 27 16:54:12 2008   Blocked incoming UDP packet from 24.64.226.111:21838 to 69.64.229.37:1027 was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 16:54:42 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 16:54:37 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 16:54:29 2008   Above message repeated 1 times
[INFO]   Tue May 27 16:54:12 2008   Blocked incoming UDP packet from 24.64.226.111:21838 to 69.64.229.37:1027was assigned the IP address of 192.168.0.196.
[INFO]   Tue May 27 16:54:42 2008   Wireless system with MAC address 0013CE804B61 disconnected for reason: Received Deauthentication.
[INFO]   Tue May 27 16:54:37 2008   Wireless system with MAC address 0013CE804B61 associated
[INFO]   Tue May 27 16:54:29 2008   Above message repeated 1 times
[INFO]   Tue May 27 16:54:12 2008   Blocked incoming UDP packet from 24.64.226.111:21838 to 69.64.229.37:1027
Title: Re: Deauthentication: what is it, why do I get it?
Post by: Lycan on May 28, 2008, 02:36:29 PM
Is the device thats being Deauthed a computer or a gaming console?
Title: Re: Deauthentication: what is it, why do I get it?
Post by: midhenry on May 28, 2008, 03:14:21 PM
Is the device thats being Deauthed a computer or a gaming console?

It's a laptop computer.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: Lycan on May 29, 2008, 12:20:29 PM
There is a patch from MS that fixes this.

KB893357
Title: Re: Deauthentication: what is it, why do I get it?
Post by: camattin on May 30, 2008, 06:18:25 AM
That patch does not fix the "disconnected for reason: Received Deauthentication" issue.  I've applied it to both of my laptops (WinXP) and still receive the disconnects very often (more than 10 times a day... even if no one's using that computer, so it's not load related).

Since this issue is apparently unable to be replicated in your lab, that sounds like an admission of guilt that there are many, many faulty routers out there (just google that that string -- "disconnected for reason: Received Deauthentication".. 212 hits with repeats omitted).

Should I just plan to RMA my faulty router and roll the dice that I get one of the ones that just happens to be non-faulty?  How about you send me the 655 from your lab that doesn't have this issue nor the one with the Wii?
Title: Re: Deauthentication: what is it, why do I get it?
Post by: pmarcovi on May 30, 2008, 08:13:32 AM
Here we go again ... There are numerous threads regarding this problem. No clear answers on what it is, why do we get it, etc. I personally get it only with Dlink products (currently DIR-655).

Total mystery :-)


Title: Re: Deauthentication: what is it, why do I get it?
Post by: Lycan on June 02, 2008, 10:17:12 AM
Try this, disable WPS and see of that helps.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: camattin on June 02, 2008, 10:29:25 AM
I've had WPS off since day one.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: midhenry on June 02, 2008, 08:19:04 PM
Try this, disable WPS and see of that helps.


Let's try this again.  In a previous post I asked:
I still get occasional disconnects due to "deauthentication"
What is "deauthentication"?
Under what circumstances does it legitimately occur?

I'd still like to know.  If you don't know, just say so.

FYI, in the last 29 hours (per my log) 60 deauthentications have occurred.
Many of them are for MAC addresses I don't recognize (the neighbors maybe?)
However, several of the deauths are for laptops in the house that I do recognize.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: pmarcovi on June 03, 2008, 07:54:21 AM
I also would like an answer to this ... I am trying to get it since I got the router last year! No luck yet! Apparently they cannot reproduce the problem. Only if they would google de-authentication and DIR-655 to see how hard it is to reproduce it ... I am opened to invite them to my house and experience it! I live in the Toronto, Canada area ...

All de-authentication errors I get are from MAC addresses I know!
Title: Re: Deauthentication: what is it, why do I get it?
Post by: Lycan on June 03, 2008, 02:34:57 PM
A de-auth is standard disconnect message. However, sometimes dirty wireless environments and various other things can cause the router to De-Auth clients.
I'll see what we can find for you, I know Microsoft admitted there was a problem with their XP wireless sub-structure that they released a patch for, however some are still complaining about the issue.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: camattin on June 04, 2008, 09:16:21 PM
Something needs to be done... my wife keeps complaining about losing her connection several (anywhere from 2 to 20) times a day.  Not to mention the Wii deauth messages that fill the logs.

I could probably get half my investment in this router back by hocking it on ebay and take my gamble with one of the competitor's routers.  Given the 3 months of frustration this thing has caused with no relief in site, that may be the best option.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: pmarcovi on June 08, 2008, 06:50:31 AM
Hear! Hear!
Title: Re: Deauthentication: what is it, why do I get it?
Post by: Padil on June 08, 2008, 10:44:32 AM
Are all your computers dhcp reserved?
Title: Re: Deauthentication: what is it, why do I get it?
Post by: pmarcovi on June 08, 2008, 06:00:07 PM
Yes.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: pizzaiolo on June 29, 2008, 10:30:26 AM
So D-Link has ignored this problem for 3 weeks now, apparently they only ask questions and provide no answers.   This router, and D-Link support are both faulty and substandard.  I'm returning my second DIR-655 and my DPR-1260 back to Amazon for a full refund including shipping.  D-Link of today doesn't even come close to resembling the company and products I used several years ago.  I'm sorry I tried them and am now researching what draft-n gear to go with.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: smlunatick on August 01, 2008, 08:22:42 AM
That patch does not fix the "disconnected for reason: Received Deauthentication" issue.  I've applied it to both of my laptops (WinXP) and still receive the disconnects very often (more than 10 times a day... even if no one's using that computer, so it's not load related).

Since this issue is apparently unable to be replicated in your lab, that sounds like an admission of guilt that there are many, many faulty routers out there (just google that that string -- "disconnected for reason: Received Deauthentication".. 212 hits with repeats omitted).

Should I just plan to RMA my faulty router and roll the dice that I get one of the ones that just happens to be non-faulty?  How about you send me the 655 from your lab that doesn't have this issue nor the one with the Wii?


It seems that no one has ever though of check the PC's configuration and all running software.  I have experience this with a different model of D-Link router (DIR-615) and was only check on the router itself.   It turned out that my Internet security software (Norton 360) firewall module was force the wireless adapter to disconnect the network, hence the deauthentication.  Newer Internet security software may need to have your wireless network SSID to be listed in the software's "trusted" network section.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: robz on December 30, 2008, 10:39:28 AM
Is the device thats being Deauthed a computer or a gaming console?

I seem to have the same issue, but it is happening on the Wireless connection to my Wii gaming console.  Since you specifically asked the question about whether this was occuring to a computer or a gaming console, and this thread went down the "computer" path....is there something I can do to resolve this issue with my Wii?  I get this log entry about every 11 minutes:

Wireless system with MAC address 00191DDD???? disconnected for reason: Received Deauthentication.
[???? added for security purposes].

Thanks,
-Rob
Title: Re: Deauthentication: what is it, why do I get it?
Post by: Lycan on December 30, 2008, 02:08:06 PM
Thats normal behavior for the Wii. Are you seeing it anywhere else?

Title: Re: Deauthentication: what is it, why do I get it?
Post by: davevt31 on December 30, 2008, 04:40:37 PM
Just got a Wii and when the Wii Connect24 is turned on and in standby mode then I would see the disconnects too.  I turned off the stand by mode and set it to update only when active and the disconnects went away.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: robz on December 30, 2008, 06:43:15 PM
The issue only seems to be associated with the Wii.  Thanks for the update.  I will turn the Connect24 feature off when the console is off and see if the log messages go away.


Thanks for the info!

-Rob
Title: Re: Deauthentication: what is it, why do I get it?
Post by: funchords on December 31, 2008, 09:38:41 PM
The issue only seems to be associated with the Wii.  Thanks for the update.  I will turn the Connect24 feature off when the console is off and see if the log messages go away.

I got a Wii for Christmas -- mine does it too -- it causes no problem.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: twk3 on January 10, 2009, 06:17:03 PM
I was having deauth's on my laptop every few minutes, but was not seeing an actual disconnection. That was when I was using WPA2. I switched to WPA and AES and everything worked.

I should note that WPA2 didn't work for me at all until I updated to the newest firmware for my wireless card, after that it worked other than the deauthentication problem. For the moment i am staying on WPA with AES.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: Lycan on January 12, 2009, 08:31:45 AM
Your laptop might have some power saving feature thats causing that behavior. not sure why changing the encryption would matter, unless you somehow altered the Group Key Interval update..........
Title: Re: Deauthentication: what is it, why do I get it?
Post by: twk3 on January 13, 2009, 08:29:08 PM
I did change the group key interval update to 8640 after having the problem, but I started having the problem while the interval was the default. But I do have the toshiba power management drivers/services installed.
Title: Re: Deauthentication: what is it, why do I get it?
Post by: Lycan on January 14, 2009, 09:01:58 AM
The GKIU is too high, lower it to 1800  and disable the power management.