This is a static archive of our old Q&A Site. Please post any new questions and answers at ask.wireshark.org.

IEEE 802.11 deauth packet reason codes and their meanings

0

I'm trying to understand the different meanings of the 802.11 deauth packets I'm receiving: I couldn't find a document that describes what each reason code means i.e why the deauth packet was sent.

asked 26 Sep '11, 02:31

ddayan's gravatar image

ddayan
41151720
accept rate: 0%

edited 26 Sep '11, 16:53

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196


One Answer:

0

The document in question is IEEE Std 802.11-2007, and you'll find the reason code values in section 7.3.1.7 "Reason Code field".

answered 26 Sep '11, 16:52

Guy%20Harris's gravatar image

Guy Harris ♦♦
17.4k335196
accept rate: 19%

already looked there, it gives you a small description about the reason codes but nothing about what triggered them. e.g. I got error code 3 which means "Deauthenticated because sending STA is leaving (or has left) IBSS or ESS". I was connected to an AP, no way that the AP was leaving the IBSS, so I guess it couldn't hear the AP anymore. but then how come it didn't use reason code 4 "Disassociated due to inactivity". the document doesn't specify much.

(27 Sep '11, 06:48) ddayan

Search the standards for the term "Deauthenticate". You may find what is applicable for your situation.

(27 Sep '11, 07:57) Jaap ♦