On Thu, Dec 15, 2016 at 06:53:47PM +0100, Jean-Pierre Tosoni wrote: > > > Thanks for the suggestion, I already tried something like this in > > > wmi.c, with the same result: > > > > > > - Before patching the firmware scans DFS channels actively (with > > probes). > > > > > > - After patching, the firmware scans DFS channels passively *until* > > > any beacon is received on the DFS channel. When *any* beacon is seen, > > > the firmware decides to scan actively on its own, without any new > > > IR/RADAR info from the driver. > > > > > > So, your patch is required but not sufficient. > > > > > > Somehow I was able to overcome this by reloading the regulation domain > > > in the radio card before each scan request: Interesting.. I'm not completely sure what could have changed the behavior based on beacon hint. I thought it was cfg80211, but if the simple change for doing NO_IR | RADAR is not sufficient, it would seem to imply that something else can do this. Some more debugging to do, I guess. > The distinction between NO_IR and CHAN_RADAR is not very clear to me. > NO_IR appears only in the world regulatory domain so it's not relevant here. NO_IR is a combination of not allowing AP, IBSS, or active scanning without having somehow been enabled by another device. RADAR has that same impact and in addition, requirement for doing radar detection and DFS by a master device. > I'd say > "the CHAN_RADAR flag should always make the firmware never do IR when > probing" > ...maybe, except if the channel is the operating channel. (this should > exclude > unassociated stations) For most cases, I'd agree that active scanning should not be used on DFS channels. That said, unicast Probe Request frame to the current AP while associated could be a reasonable exception. In addition, WPS with PBC depends on Probe Request frames to allow PBC session overlap detection, so there might be sufficient justification to allow Probe Request frame to be sent out for a very short duration (couple of seconds) after seeing a Beacon frame on the channel for such special cases. -- Jouni Malinen PGP id EFC895FA