SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > ASUS N Routers & Adapters

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 12-26-2012, 08:21 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 1,005
Thanks: 13
Thanked 112 Times in 101 Posts
sfx2000 is just starting out
Default N66U and Spanning Tree...

Interesting observation on Wireshark...

Have a neighbour with a new N66U AP - nice unit

The box is configured with WPA2-PSK - but in a wireshark capture, something I noticed is that the box is sending out STP frames, and more importantly, sending them out TKIP, not AES.

So a couple of questions:

1) Why is the N66U sending out STP frames? Useful perhaps in Mesh WiFi networks, but useless in a home environment
2) Why is a TKIP vector present in the STP frame?

packet dump link (some vals changed to protect the innocent):

https://dl.dropbox.com/u/2181814/N66u_STP_TKIP.txt

Bug? Feature?

Last edited by sfx2000; 12-26-2012 at 08:26 PM.
Reply With Quote
  #2  
Old 12-26-2012, 10:01 PM
housej55 housej55 is offline
New Member
 
Join Date: Dec 2012
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
housej55 is just starting out
Default

Quote:
Originally Posted by sfx2000 View Post
Interesting observation on Wireshark...

Have a neighbour with a new N66U AP - nice unit

The box is configured with WPA2-PSK - but in a wireshark capture, something I noticed is that the box is sending out STP frames, and more importantly, sending them out TKIP, not AES.

So a couple of questions:

1) Why is the N66U sending out STP frames? Useful perhaps in Mesh WiFi networks, but useless in a home environment
2) Why is a TKIP vector present in the STP frame?

packet dump link (some vals changed to protect the innocent):

https://dl.dropbox.com/u/2181814/N66u_STP_TKIP.txt

Bug? Feature?
This is a good find sfx, was this unit running the stock Asus firmware?
Reply With Quote
  #3  
Old 12-26-2012, 10:35 PM
jsmiddleton4 jsmiddleton4 is offline
Very Senior Member
 
Join Date: Dec 2012
Posts: 236
Thanks: 14
Thanked 9 Times in 9 Posts
jsmiddleton4 is just starting out
Default

I turned STP off because my understanding of it is that when I just have one router it isn't needed. When I had a WDS system with 3 routers I did enable it.

Now I guess doing so may not be a bad idea for other reasons.
Reply With Quote
  #4  
Old 12-26-2012, 11:21 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 1,005
Thanks: 13
Thanked 112 Times in 101 Posts
sfx2000 is just starting out
Default

Quote:
Originally Posted by housej55 View Post
This is a good find sfx, was this unit running the stock Asus firmware?
AFAIK - Yes...

Makes is unique to fingerprint

Last edited by sfx2000; 12-26-2012 at 11:26 PM.
Reply With Quote
  #5  
Old 12-26-2012, 11:22 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 1,005
Thanks: 13
Thanked 112 Times in 101 Posts
sfx2000 is just starting out
Default

Quote:
Originally Posted by jsmiddleton4 View Post
I turned STP off because my understanding of it is that when I just have one router it isn't needed. When I had a WDS system with 3 routers I did enable it.

Now I guess doing so may not be a bad idea for other reasons.
Don't need STP frames for WDS - different layer... STP is layer 3, WDS is layer 2...
Reply With Quote
  #6  
Old 12-29-2012, 07:27 PM
sfx2000 sfx2000 is offline
Very Senior Member
 
Join Date: Aug 2011
Location: San Diego, CA
Posts: 1,005
Thanks: 13
Thanked 112 Times in 101 Posts
sfx2000 is just starting out
Default

Bumping the thread - this is likely a security issue - if the primary is WPA2-AES, the STP frames being sent out TKIP is not very smart.

IEEE 802.11 Data, Flags: .p....F.
Type/Subtype: Data (0x20)
Frame Control: 0x4208 (Normal)
Version: 0
Type: Data frame (2)
Subtype: 0
Flags: 0x42
.... ..10 = DS status: Frame from DS to a STA via AP(To DS: 0 From DS: 1) (0x02)
.... .0.. = More Fragments: This is the last fragment
.... 0... = Retry: Frame is not being retransmitted
...0 .... = PWR MGT: STA will stay up
..0. .... = More Data: No data buffered
.1.. .... = Protected flag: Data is protected
0... .... = Order flag: Not strictly ordered
Duration: 0
Destination address: Spanning-tree-(for-bridges)_00 (01:80:c2:00:00:00)
BSS Id: 30:85:a9:xx:yy:zz (30:85:a9:xx:yy:zz)
Source address: 30:85:a9:xx:yy:zz (30:85:a9:xx:yy:zz)
Fragment number: 0
Sequence number: 292
TKIP parameters
TKIP Ext. Initialization Vector: 0x00000007F200
Key Index: 2
Data (46 bytes)

0000 fa 08 9d 79 79 c9 ac 3f 21 2d 47 7d bc 46 50 97 ...yy..?!-G}.FP.
0010 25 02 e4 4d f1 d0 7a c8 34 07 86 34 f7 ad 5e eb %..M..z.4..4..^.
0020 84 2d 30 c7 a2 a8 38 33 5e 96 24 46 c5 8f .-0...83^.$F..
Data: fa089d7979c9ac3f212d477dbc4650972502e44df1d07ac8.. .
[Length: 46]
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 09:42 PM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  457
stevech  194
sm00thpapa  181
azazel1024  180
KGB7  159
philmiami  92
jim769  83
microchip  82
htismaqe  77
AcostaJA  74
RMerlin  5185
stevech  315
ryzhov_al  259
TeHashX  212
RogerSC  187
L&LD  186
joegreat  123
jlake  122
sinshiva  118
sfx2000  112
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  32602
Old Switched...  9144
Old NEW RT-AC68R...  8497
Old ASUS...  7815
Old ASUS...  7544
Old 3.0.0.4.376.1...  7140
Old ASUS RT-AC87...  5159
Old ASUS RTAC68U...  4086
Old ASUS...  3986
Old Netgear...  3867
Old Asuswrt-Merli...  285
Old ASUS...  91
Old Overclock...  75
Old [Q] How to...  73
Old Switched...  66
Old NEW RT-AC68R...  57
Old N66U daily...  47
Old How many of...  45
Old ASUS...  45
Old ASUS...  44


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.