This is our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

I'm trying to understand the different meanings of the 802.11 deauth packets I'm receiving: I couldn't find a document that describes what each reason code means i.e why the deauth packet was sent.

asked 26 Sep '11, 02:31

ddayan's gravatar image

ddayan
41151720
accept rate: 0%

edited 26 Sep '11, 16:53

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


The document in question is IEEE Std 802.11-2007, and you'll find the reason code values in section 7.3.1.7 "Reason Code field".

permanent link

answered 26 Sep '11, 16:52

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

already looked there, it gives you a small description about the reason codes but nothing about what triggered them. e.g. I got error code 3 which means "Deauthenticated because sending STA is leaving (or has left) IBSS or ESS". I was connected to an AP, no way that the AP was leaving the IBSS, so I guess it couldn't hear the AP anymore. but then how come it didn't use reason code 4 "Disassociated due to inactivity". the document doesn't specify much.

(27 Sep '11, 06:48) ddayan

Search the standards for the term "Deauthenticate". You may find what is applicable for your situation.

(27 Sep '11, 07:57) Jaap ♦
Your answer
toggle preview

Follow this question

By Email:

Once you sign in you will be able to subscribe for any updates here

By RSS:

Answers

Answers and Comments

Markdown Basics

  • *italic* or _italic_
  • **bold** or __bold__
  • link:[text](http://url.com/ "title")
  • image?![alt text](/path/img.jpg "title")
  • numbered list: 1. Foo 2. Bar
  • to add a line break simply add two spaces to where you would like the new line to be.
  • basic HTML tags are also supported

Question tags:

×114
×6

question asked: 26 Sep '11, 02:31

question was seen: 23,311 times

last updated: 27 Sep '11, 07:57

p​o​w​e​r​e​d by O​S​Q​A