Search Linux Wireless

Re: [PATCH] hostapd: use eapol frames from ethernet device

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 8/13/07, Johannes Berg <johannes@xxxxxxxxxxxxxxxx> wrote:
> On Mon, 2007-08-13 at 13:46 +0300, Tomas Winkler wrote:
>
> >  I think it was a polite query I've made, don't see any reason to use
> > this language. If you precept it otherwise I apologize it wasn't my
> > intention.
>
> Apologies. I seriously don't understand that comment though, the patch
> didn't touch the management interface at all, in fact it renamed only a
> few variables and changed EAPOL frame receiving from using the
> management interface to the ethernet framed interface.
>
> > They have management meaning. So it was appropriate to route them
> > through management interface rather then from data interface.
>
> I'm not sure we understand each other. The only thing I changed with
> this patch and the corresponding kernel patch is that all data frames
> including those that are used for management purposes are now routed
> through the data interface. Why do you think that is wrong? Reordering
> your mail a bit, you also said
>
> > On the contrary what I'm saying that EAPOL packets are the only data
> > packets that should go up until handshake is done.
>
> which seems to agree with me. You can achieve the effect of letting
> *only* EAPOL packets through by setting the 802.1X protection parameter
> on the network interface via the private prism ioctl, hostapd doesn't
> seem to do that unless explicitly requested though.

> The actual technical reason for doing is that subsequent patches totally
> remove the management interface and on the monitor interface the EAPOL
> frames show up undecrypted.

Can you enlighten me and tell me why the monitor interface is
preferable over management interface? I've probably got busy and
missed the whole conversation.
 I'm not so familiar with monitor interface but isn't it to be
sniffing interface - everything goes up including data raw packets.
Thanks for keeping patience with me :)

What if management frames needs decryption? I think this is 802.11w
specs that defines that.

Thanks
Tomas

> johannes
>
>
-
To unsubscribe from this list: send the line "unsubscribe linux-wireless" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html

[Index of Archives]     [Linux Host AP]     [ATH6KL]     [Linux Bluetooth]     [Linux Netdev]     [Kernel Newbies]     [Linux Kernel]     [IDE]     [Security]     [Git]     [Netfilter]     [Bugtraq]     [Yosemite News]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux ATA RAID]     [Samba]     [Device Mapper]
  Powered by Linux