On Wed, Mar 28, 2018 at 04:34:56PM +0200, Davide Caratti wrote: > When wpa_supplicant is running on a Linux interface that is configured in > promiscuous mode, and it is not a member of a bridge, incoming EAPOL > packets are processed regardless of the Destination Address in the frame. > As a consequence, there are situations where wpa_supplicant replies to > EAPOL packets that are not destined for it. > > This behavior seems undesired (see IEEE Std 802.1X-2010, 11.4.a), and can > be avoided by attaching a BPF filter that lets the kernel discard packets > having pkt_type equal to PACKET_OTHERHOST. Thanks, applied. -- Jouni Malinen PGP id EFC895FA _______________________________________________ Hostap mailing list Hostap@xxxxxxxxxxxxxxxxxxx http://lists.infradead.org/mailman/listinfo/hostap
