Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[fgl30]

We are attempting to isolate the issue. So far it's been difficult as we can not find a LCD (lowest common denominator) to start at. Any information you can provide about the machines that getting De-authed, would be helpful.

Do you suspicious about Intel wireless links?

[bspvette86]

Newguy110,
Have you tried any of the throughput tests similar to the ones from my thread in the DWA-652 forum?  (ie ixia Qcheck or ftp)

Regards,
Karl

[newguy110]

Internet Sessions
This page displays the full details of active internet sessions to your router.

10.10.0.199:49172 49172 68.142.233.185:443 TCP EST Out 129 7675
10.10.0.199:49167 49167 216.155.193.140:5050 TCP EST Out 128 7754
68.151.230.27:68 68 *.*.*.*:* UDP - - 128 -

I've rolled back to 1.11 firmware and this ip is showing up 68.151.230.27 and it's not in my IP range.

[davevt31]

Internet Sessions
This page displays the full details of active internet sessions to your router.

10.10.0.199:49172 49172 68.142.233.185:443 TCP EST Out 129 7675
10.10.0.199:49167 49167 216.155.193.140:5050 TCP EST Out 128 7754
68.151.230.27:68 68 *.*.*.*:* UDP - - 128 -

I've rolled back to 1.11 firmware and this ip is showing up 68.151.230.27 and it's not in my IP range.

68.151.230.27 comes back to Shaw Communications  in Alberta, Canada.

[newguy110]

68.151.230.27 comes back to Shaw Communications  in Alberta, Canada.

What does it mean? Please elaborate cause I'm also getting this logs that's being blocked.

[INFO] Sun Mar 02 11:16:06 2008 Blocked incoming UDP packet from 24.64.206.103:14876 to 68.151.230.27:1026
[INFO] Sun Mar 02 11:16:06 2008 Blocked incoming UDP packet from 24.64.206.103:14876 to 68.151.230.27:1027
[INFO] Sun Mar 02 11:16:06 2008 Blocked incoming UDP packet from 24.64.206.103:14876 to 68.151.230.27:1028
[INFO] Sun Mar 02 11:14:16 2008 Blocked incoming UDP packet from 68.144.160.15:16900 to 68.151.230.27:19402
[INFO] Sun Mar 02 11:11:56 2008 Blocked incoming UDP packet from 24.64.212.247:9244 to 68.151.230.27:1028
[INFO] Sun Mar 02 11:11:56 2008 Blocked incoming UDP packet from 24.64.212.247:9244 to 68.151.230.27:1027
[INFO] Sun Mar 02 11:11:56 2008 Blocked incoming UDP packet from 24.64.212.247:9244 to 68.151.230.27:1026
[INFO] Sun Mar 02 11:01:10 2008 Blocked incoming UDP packet from 76.103.140.43:40684 to 68.151.230.27:19402
[INFO] Sun Mar 02 11:00:20 2008 Blocked incoming ICMP packet (ICMP type from 83.222.165.82 to 68.151.230.27
[INFO] Sun Mar 02 10:59:46 2008 Blocked incoming TCP connection request from 68.151.195.114:1466 to 68.151.230.27:139
[INFO] Sun Mar 02 10:58:20 2008 Blocked incoming TCP connection request from 68.150.170.141:43217 to 68.151.230.27:139

[davevt31]

I get the same exact stuff being blocked.  I sent a copy of the logs to my ISP (Time Warner) they said there was nothing they could do about it.  I do have digital phone so I have always wondered if it had something to do with that, but have never found a real answer.

[newguy110]

I get the same exact stuff being blocked.  I sent a copy of the logs to my ISP (Time Warner) they said there was nothing they could do about it.  I do have digital phone so I have always wondered if it had something to do with that, but have never found a real answer.

Thanks davevt31 I thought I am only the only one that have this problem.  I'll will patiently wait for the next firmware.

Cheers,
Newguy110

[EricP]

Thanks davevt31 I thought I am only the only one that have this problem.  I'll will patiently wait for the next firmware.

Cheers,
Newguy110

For what??? Incoming packets getting blocked? Do you have any idea how many random ranges of IP addresses attempt to connect or portscan public addresses of major broadband providers every day? How is this related to deauthentication?

As I said before, we fixed our deauthentication problem by updating wireless drivers and applying Windows XP wireless hotfixes KB893357 and KB917021. IF you are on XP and are having disconnect problems, set the router to WPA2 only using AES encryption and apply those hotfixes.  Have not had a problem since.

[newguy110]

For what??? Incoming packets getting blocked? Do you have any idea how many random ranges of IP addresses attempt to connect or portscan public addresses of major broadband providers every day? How is this related to deauthentication?

As I said before, we fixed our deauthentication problem by updating wireless drivers and applying Windows XP wireless hotfixes KB893357 and KB917021. IF you are on XP and are having disconnect problems, set the router to WPA2 only using AES encryption and apply those hotfixes.  Have not had a problem since.

First of all could you post the link for the update.

Second, Did anybody tried it and worked?

Third this is only one of many problem that the router is experiencing if you read the thread.

Fourth I have a vista in one of my laptop in my previous post

Keep trying.

Newguy110

P.S.
I found your link in the WII deauthentication thread geez.  anyway I'm going to try it in my xp and let you guys know.

[EricP]

P.S.
I found your link in the WII deauthentication thread geez.  anyway I'm going to try it in my xp and let you guys know.

yeah, oops.. I got the threads mixed up and meant to post the links here and not at all in the wii thread

[fgl30]

@EricP

Well, first of all, thx and congratulations for trying to help us with terrible "Deauthetication" problem, but, I tell you a thing: you know what is reallu strange? For me, the "Received Deauthetication" happens time to time... is not a constant problem.... it appears and disappears without explanation or changes in settings.... so, your solution doesn´t worked for me... I think maybe the problem is in router hardware... really strange problem....

[newguy110]

First thanks EricP for showing us the patch.

I did the update in my xp machines, XP Home and XP pro and I'm guessing the SP1 for vista is comming out soon I hope. 

For some reason I am experiencing what fgl30 is experiencing.  It only happens from time to time and both and N and G wireless cards is getting it now.

It's a bit more stable now but if you use it in realtime usage like video still you will encounter the drop and deauthentication.

Just reporting back.

newguy110

[camattin]

Happening here too.  2 wireless laptops... both 802.11g clients.  Router is set to g-only... WPA2-Personal, AES.

It's intermittent for me too, happens a few times back to back, then seems to be ok for a while.

[bokeron]

Just a wild guess but, could some of these issues have to do with a deauthentication attack ?

- "bad guy" sends spoofed deauthentication frame to router, router send deauthentication data to "good guy" -

[newguy110]

Looks like Dlink is on to something.

I installed the new driver 1.40 for dwa552

DIR-655 Router is in msbeta version

Enable Wish
Enable QoS
No Mac filtering

Video is more relialble.  Keep it up!!  Cant wait till dlink release this with support cause it the most stable setup that I have in months of waiting.
 

Thanks!!!!
newguy110