Sometimes when I kick connected client or when i disable and enable wlan ap/bridge interface I recive strange MAC log entry:



02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth
02:10:22 wireless,info xx: data from unknown device AA:AA:03:00:00:00, sent deauth


Any idea what is causing this?

Client sends data to AP, but client is not registred to access point anymore. Then you will get such log output.
Client should connect to access point again.

I've seen that mac adress as well.

I've seen that mac adress as well.

sorry, that was me, I was testing your network security

now what you need to figure out, is how I did it from the other side of the Atlantic!!

I have seen this same issue recently, I was using 2.9.38 when it started happening. I updated to 2.9.42 and it didn't resolve the issue. I also tried 2.9.27 with the same results.

After a few hours, the deauths stopped rolling by in the log, and everybody reassociated. While the deauths were occuring only 4 of 34 stations could associate to the AP, even though the deauths were all for the same 1 or 2 mac addresses.

I think that this is either "the AP card went bad because it hung out on the tower for 2 years", or the a CPE related issue.

All of the CPE we saw doing this were EZ3+ CPE's that we bought from wisp-router.com

short or long preamble?