SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > ASUS N Routers & Adapters

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 12-26-2012, 08:21 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 727
Thanks: 7
Thanked 65 Times in 61 Posts
sfx2000 is just starting out
Default N66U and Spanning Tree...

Interesting observation on Wireshark...

Have a neighbour with a new N66U AP - nice unit

The box is configured with WPA2-PSK - but in a wireshark capture, something I noticed is that the box is sending out STP frames, and more importantly, sending them out TKIP, not AES.

So a couple of questions:

1) Why is the N66U sending out STP frames? Useful perhaps in Mesh WiFi networks, but useless in a home environment
2) Why is a TKIP vector present in the STP frame?

packet dump link (some vals changed to protect the innocent):

https://dl.dropbox.com/u/2181814/N66u_STP_TKIP.txt

Bug? Feature?

Last edited by sfx2000; 12-26-2012 at 08:26 PM.
Reply With Quote
  #2  
Old 12-26-2012, 10:01 PM
housej55 housej55 is offline
New Member
 
Join Date: Dec 2012
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
housej55 is just starting out
Default

Quote:
Originally Posted by sfx2000 View Post
Interesting observation on Wireshark...

Have a neighbour with a new N66U AP - nice unit

The box is configured with WPA2-PSK - but in a wireshark capture, something I noticed is that the box is sending out STP frames, and more importantly, sending them out TKIP, not AES.

So a couple of questions:

1) Why is the N66U sending out STP frames? Useful perhaps in Mesh WiFi networks, but useless in a home environment
2) Why is a TKIP vector present in the STP frame?

packet dump link (some vals changed to protect the innocent):

https://dl.dropbox.com/u/2181814/N66u_STP_TKIP.txt

Bug? Feature?
This is a good find sfx, was this unit running the stock Asus firmware?
Reply With Quote
  #3  
Old 12-26-2012, 10:35 PM
jsmiddleton4 jsmiddleton4 is offline
Very Senior Member
 
Join Date: Dec 2012
Posts: 236
Thanks: 14
Thanked 9 Times in 9 Posts
jsmiddleton4 is just starting out
Default

I turned STP off because my understanding of it is that when I just have one router it isn't needed. When I had a WDS system with 3 routers I did enable it.

Now I guess doing so may not be a bad idea for other reasons.
Reply With Quote
  #4  
Old 12-26-2012, 11:21 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 727
Thanks: 7
Thanked 65 Times in 61 Posts
sfx2000 is just starting out
Default

Quote:
Originally Posted by housej55 View Post
This is a good find sfx, was this unit running the stock Asus firmware?
AFAIK - Yes...

Makes is unique to fingerprint

Last edited by sfx2000; 12-26-2012 at 11:26 PM.
Reply With Quote
  #5  
Old 12-26-2012, 11:22 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 727
Thanks: 7
Thanked 65 Times in 61 Posts
sfx2000 is just starting out
Default

Quote:
Originally Posted by jsmiddleton4 View Post
I turned STP off because my understanding of it is that when I just have one router it isn't needed. When I had a WDS system with 3 routers I did enable it.

Now I guess doing so may not be a bad idea for other reasons.
Don't need STP frames for WDS - different layer... STP is layer 3, WDS is layer 2...
Reply With Quote
  #6  
Old 12-29-2012, 07:27 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 727
Thanks: 7
Thanked 65 Times in 61 Posts
sfx2000 is just starting out
Default

Bumping the thread - this is likely a security issue - if the primary is WPA2-AES, the STP frames being sent out TKIP is not very smart.

IEEE 802.11 Data, Flags: .p....F.
Type/Subtype: Data (0x20)
Frame Control: 0x4208 (Normal)
Version: 0
Type: Data frame (2)
Subtype: 0
Flags: 0x42
.... ..10 = DS status: Frame from DS to a STA via AP(To DS: 0 From DS: 1) (0x02)
.... .0.. = More Fragments: This is the last fragment
.... 0... = Retry: Frame is not being retransmitted
...0 .... = PWR MGT: STA will stay up
..0. .... = More Data: No data buffered
.1.. .... = Protected flag: Data is protected
0... .... = Order flag: Not strictly ordered
Duration: 0
Destination address: Spanning-tree-(for-bridges)_00 (01:80:c2:00:00:00)
BSS Id: 30:85:a9:xx:yy:zz (30:85:a9:xx:yy:zz)
Source address: 30:85:a9:xx:yy:zz (30:85:a9:xx:yy:zz)
Fragment number: 0
Sequence number: 292
TKIP parameters
TKIP Ext. Initialization Vector: 0x00000007F200
Key Index: 2
Data (46 bytes)

0000 fa 08 9d 79 79 c9 ac 3f 21 2d 47 7d bc 46 50 97 ...yy..?!-G}.FP.
0010 25 02 e4 4d f1 d0 7a c8 34 07 86 34 f7 ad 5e eb %..M..z.4..4..^.
0020 84 2d 30 c7 a2 a8 38 33 5e 96 24 46 c5 8f .-0...83^.$F..
Data: fa089d7979c9ac3f212d477dbc4650972502e44df1d07ac8.. .
[Length: 46]
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 04:24 AM.

Top 10 Stats
Top Posters* Top Thanked
RMerlin  401
stevech  156
thelonelycode...  149
L&LD  126
azazel1024  119
KGB7  86
jim769  80
DrTeeth  69
Adamm  65
speedingcheet...  61
RMerlin  4487
stevech  275
ryzhov_al  199
TeHashX  194
RogerSC  166
L&LD  163
joegreat  105
jlake  102
PrivateJoker  93
sinshiva  88
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  31793
Old Asuswrt-Merli...  23808
Old ASUS...  22700
Old Beta Version...  17525
Old 'Heartbleed'...  14303
Old Linksys...  9417
Old Potential...  7933
Old Asus-Merlin...  7106
Old Groundhog...  6424
Old Linksys...  5723
Old Asuswrt-Merli...  218
Old Asuswrt-Merli...  177
Old Linksys...  144
Old ASUS...  125
Old Beta Version...  112
Old Potential...  98
Old Linksys...  79
Old Groundhog...  49
Old Asus router...  43
Old USB drive...  39



Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.