wpa_supplicant drops connection

BCarey · 06-09-2006, 07:34 PM

Hi,

I have been migrating some networks from WEP to WPA, and have run into a bit of a snag with wpa_supplicant. It seems to drop the connection after a certain amount of inactivity and I need to kill it and restart it to get back on line.

I'm using:

Slackware 10.2
Linux 2.6.13
wpa_supplicant 0.4.9
ndiswrapper 1.10 (I think ;-)
others?

First sign of trouble is:

Code:

RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=95
  EAPOL-Key type=254
  key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack)
  key_length=32 key_data_length=0
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 01
  key_nonce - hexdump(len=32): 44 e3 2d 64 01 23 f8 02 64 e6 21 6e d4 3e 8b a1 d9 70 ce c5 20 62 75 a4 6b cc 62 03 10 a4 ac 69
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
WPA: EAPOL-Key Replay Counter did not increase - dropping packet
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=95
  EAPOL-Key type=254
  key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack)
  key_length=32 key_data_length=0
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 02
  key_nonce - hexdump(len=32): 44 e3 2d 64 01 23 f8 02 64 e6 21 6e d4 3e 8b a1 d9 70 ce c5 20 62 75 a4 6b cc 62 03 10 a4 ac 69
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
WPA: EAPOL-Key Replay Counter did not increase - dropping packet
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=95
  EAPOL-Key type=254
  key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack)
  key_length=32 key_data_length=0
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 03
  key_nonce - hexdump(len=32): 44 e3 2d 64 01 23 f8 02 64 e6 21 6e d4 3e 8b a1 d9 70 ce c5 20 62 75 a4 6b cc 62 03 10 a4 ac 69
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
WPA: EAPOL-Key Replay Counter did not increase - dropping packet
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=95
  EAPOL-Key type=254
  key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack)
  key_length=32 key_data_length=0
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 04
  key_nonce - hexdump(len=32): 44 e3 2d 64 01 23 f8 02 64 e6 21 6e d4 3e 8b a1 d9 70 ce c5 20 62 75 a4 6b cc 62 03 10 a4 ac 69
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
State: COMPLETED -> 4WAY_HANDSHAKE
WPA: RX message 1 of 4-Way Handshake from 00:0f:3d:5e:b4:46 (ver=1)
WPA: WPA IE for msg 2/4 - hexdump(len=26): dd 18 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02 00 00
WPA: Renewed SNonce - hexdump(len=32): a3 8b 1a e8 b9 1a 41 0b 73 44 50 5b 31 c8 2b 96 04 f5 1d e1 e6 3c e0 a8 1d f3 57 ea 44 69 60 9d
WPA: PMK - hexdump(len=32): [REMOVED]
WPA: PTK - hexdump(len=64): [REMOVED]
WPA: Sending EAPOL-Key 2/4
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=119
  EAPOL-Key type=254
  key_info 0x1c9 (ver=1 keyidx=0 rsvd=0 Pairwise Install Ack MIC)
  key_length=32 key_data_length=24
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 05
  key_nonce - hexdump(len=32): 44 e3 2d 64 01 23 f8 02 64 e6 21 6e d4 3e 8b a1 d9 70 ce c5 20 62 75 a4 6b cc 62 03 10 a4 ac 69
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): dc e6 f9 c4 36 f3 83 0b 7a 9a 23 48 0f 49 64 55
State: 4WAY_HANDSHAKE -> 4WAY_HANDSHAKE
WPA: RX message 3 of 4-Way Handshake from 00:0f:3d:5e:b4:46 (ver=1)
WPA: IE KeyData - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 02
WPA: Sending EAPOL-Key 4/4
WPA: Installing PTK to the driver.
WPA: RSC - hexdump(len=6): 00 00 00 00 00 00
wpa_driver_wext_set_key: alg=2 key_idx=0 set_tx=1 seq_len=6 key_len=32
State: 4WAY_HANDSHAKE -> GROUP_HANDSHAKE
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=127
  EAPOL-Key type=254
  key_info 0x391 (ver=1 keyidx=1 rsvd=0 Group Ack MIC Secure)
  key_length=32 key_data_length=32
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 06
  key_nonce - hexdump(len=32): 00 37 87 9f 79 b3 3b e0 09 7a 4c 47 28 fd 6f 19 da b8 d4 d8 9b 78 4c f6 d7 b7 ce 5e c3 87 36 5d
  key_iv - hexdump(len=16): a2 10 3e ac d2 f3 39 d4 e4 6b 07 2b 0a b8 2e 70
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): eb cf 5f de b0 0a c1 60 60 9c 73 4e 70 34 b7 e0
State: GROUP_HANDSHAKE -> GROUP_HANDSHAKE
WPA: RX message 1 of Group Key Handshake from 00:0f:3d:5e:b4:46 (ver=1)
WPA: Group Key - hexdump(len=32): [REMOVED]
WPA: Installing GTK to the driver (keyidx=1 tx=0).
WPA: RSC - hexdump(len=6): 00 00 00 00 00 00
wpa_driver_wext_set_key: alg=2 key_idx=1 set_tx=0 seq_len=6 key_len=32
WPA: Sending EAPOL-Key 2/2
WPA: Key negotiation completed with 00:0f:3d:5e:b4:46 [PTK=TKIP GTK=TKIP]
Cancelling authentication timeout
State: GROUP_HANDSHAKE -> COMPLETED
EAPOL: External notification - portValid=1
EAPOL: External notification - EAP success=1
EAP: EAP entering state DISABLED
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=95
  EAPOL-Key type=254
  key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack)
  key_length=32 key_data_length=0
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 01
  key_nonce - hexdump(len=32): 2b 79 9f c9 c8 b5 15 1e 23 6e 77 ca 2e 72 04 17 28 3c fb 4a 59 b9 13 b4 b0 fc 12 12 87 b5 5a 24
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
WPA: EAPOL-Key Replay Counter did not increase - dropping packet
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=95
  EAPOL-Key type=254
  key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack)
  key_length=32 key_data_length=0
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 02
  key_nonce - hexdump(len=32): 2b 79 9f c9 c8 b5 15 1e 23 6e 77 ca 2e 72 04 17 28 3c fb 4a 59 b9 13 b4 b0 fc 12 12 87 b5 5a 24
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
WPA: EAPOL-Key Replay Counter did not increase - dropping packet
RX EAPOL from 00:0f:3d:5e:b4:46
IEEE 802.1X RX: version=1 type=3 length=95
  EAPOL-Key type=254
  key_info 0x89 (ver=1 keyidx=0 rsvd=0 Pairwise Ack)
  key_length=32 key_data_length=0
  replay_counter - hexdump(len=8): 00 00 00 00 00 00 00 03
  key_nonce - hexdump(len=32): 2b 79 9f c9 c8 b5 15 1e 23 6e 77 ca 2e 72 04 17 28 3c fb 4a 59 b9 13 b4 b0 fc 12 12 87 b5 5a 24
  key_iv - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
  key_rsc - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_id (reserved) - hexdump(len=8): 00 00 00 00 00 00 00 00
  key_mic - hexdump(len=16): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
WPA: EAPOL-Key Replay Counter did not increase - dropping packet

...

And then it just keeps repeating and repeating. Then I kill it, restart it, and it runs fine again. Does anyone have any suggestions about this?

Thanks,
Brian

BCarey · 08-09-2006, 05:47 PM

Does anyone have any ideas on this? It's still an irritating problem.

Thanks,
Brian

c0uchm0nster · 08-20-2006, 01:05 AM

Looks like I'm having the same issue.

Mine drops when the AP (linksys) renews the group key. I have an additional snag that after restarting wpa_supplicant i have to manually reconfigure my routes as it drops the default route from the list.

I'm using ndiswrapper with the neti2200 driver for a linksys wpc54g cardbus card. card works fine with no encryption or wep (without wpa_supplicant).

running wpa_supplicant with -Dwext, kernel 2.6.17, gentoo, wpa_supplicant 0.5.4, ndiswrapper 1.17, wpa-psk tkip.

hopefully bcary can confirm that some of the same stuff is happening to him and we can go from there.