On Wed, Mar 21, 2018 at 4:25 AM, Johannes Berg <johannes@xxxxxxxxxxxxxxxx> wrote: > On Mon, 2018-03-05 at 20:07 +0530, Amitkumar Karwar wrote: >> From: Siva Rebbagondla <siva.rebbagondla@xxxxxxxxxxxxxxxxxx> >> >> This patch adds a check to drop received broadcast/multicast frames >> if >> PN is invalid (i.e. not greater than last PN). bc_mc_pn >> variable added for each interface >> > Can you say why you do this rather than letting mac80211 do it? Thanks for your comment. I wasn't aware that mac80211 can do this even for decrypted Rx packets. Only thing is we need to avoid IV stripping. I will create a patch for it. Regards, Amitkumar