这是否可能是一次 Wi-Fi 取消认证攻击?

这是否可能是一次 Wi-Fi 取消认证攻击?

最近,我们在某个频段的 Wi-Fi 连接非常糟糕。无论我选择什么设置,在重置后,以及使用各种新旧 Wi-Fi 路由器固件后,我们的连接速度仍然非常非常慢。

也尝试了 WireShark,得到了大量的 TCP 重传和 TCP 虚假重传数据包。

但当我使用 MAC 过滤器并将我们自己的设备列入白名单时,连接就好多了。尽管我们仍然收到“deauth”日志消息。

下面是来自我们 RT-AX92U 路由器的系统日志的片段,现在再次运行最新固件。或者实际上有两个路由器在 AiMesh 模式下运行。

5GHz-2(两个路由器之间通信的“回程”)存在该问题。

还尝试了中继器模式,但在第二个 5 GHz 频段上也是同样的情况。还尝试禁用很多东西并重新启用它们。漫游助手目前仍处于禁用状态。

下面的代码片段中出现“Deauth_ind”等现象是否还有其他原因?

Jan 17 07:55:47 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth6: Deauth_ind XX:XX:XX:XX:XX:A0, status: 0, reason: Disassociated due to inactivity (4)
Jan 17 07:57:01 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth5: Auth XX:XX:XX:XX:XX:A4, status: 0, reason: d11 RC reserved (0)
Jan 17 07:57:01 wlceventd: CAP,F4:90: wlceventd_proc_event(460): eth5: Assoc XX:XX:XX:XX:XX:A4, status: 0, reason: d11 RC reserved (0)
Jan 17 07:58:54 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth6: Auth XX:XX:XX:XX:XX:DE, status: 0, reason: d11 RC reserved (0)
Jan 17 07:58:54 wlceventd: CAP,F4:90: wlceventd_proc_event(460): eth6: Assoc XX:XX:XX:XX:XX:DE, status: 0, reason: d11 RC reserved (0)
Jan 17 08:54:48 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth6: Auth XX:XX:XX:XX:XX:A0, status: 0, reason: d11 RC reserved (0)
Jan 17 08:54:48 wlceventd: CAP,F4:90: wlceventd_proc_event(460): eth6: Assoc XX:XX:XX:XX:XX:A0, status: 0, reason: d11 RC reserved (0)
Jan 17 08:56:44 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth7: Deauth_ind XX:XX:XX:XX:XX:30, status: 0, reason: Deauthenticated because sending station is leaving (or has left) IBSS or ESS (3)
Jan 17 08:56:44 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth7: Deauth_ind XX:XX:XX:XX:XX:30, status: 0, reason: Class 3 frame received from nonassociated station (7)
Jan 17 08:56:44 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth7: Deauth_ind XX:XX:XX:XX:XX:30, status: 0, reason: Class 3 frame received from nonassociated station (7)
Jan 17 08:56:44 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth7: Deauth_ind XX:XX:XX:XX:XX:30, status: 0, reason: Class 3 frame received from nonassociated station (7)
Jan 17 08:56:44 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth7: Deauth_ind XX:XX:XX:XX:XX:30, status: 0, reason: Class 3 frame received from nonassociated station (7)
Jan 17 08:56:45 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth7: Auth XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)
Jan 17 08:56:45 wlceventd: CAP,F4:90: wlceventd_proc_event(442): eth7: ReAssoc XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)
Jan 17 08:59:08 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth7: Deauth_ind XX:XX:XX:XX:XX:30, status: 0, reason: Unspecified reason (1)
Jan 17 09:13:06 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth6: Deauth_ind XX:XX:XX:XX:XX:A0, status: 0, reason: Disassociated due to inactivity (4)
Jan 17 09:13:19 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth6: Auth XX:XX:XX:XX:XX:A0, status: 0, reason: d11 RC reserved (0)
Jan 17 09:13:19 wlceventd: CAP,F4:90: wlceventd_proc_event(442): eth6: ReAssoc XX:XX:XX:XX:XX:A0, status: 0, reason: d11 RC reserved (0)
Jan 17 09:23:23 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth6: Deauth_ind XX:XX:XX:XX:XX:A0, status: 0, reason: Station requesting (re)association is not authenticated with responding station (9)
Jan 17 09:23:29 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth7: Auth XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)
Jan 17 09:23:29 wlceventd: CAP,F4:90: wlceventd_proc_event(460): eth7: Assoc XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)
Jan 17 09:24:04 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth5: Auth XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)
Jan 17 09:24:04 wlceventd: CAP,F4:90: wlceventd_proc_event(460): eth5: Assoc XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)
Jan 17 09:24:04 wlceventd: CAP,F4:90: wlceventd_proc_event(414): eth7: Disassoc XX:XX:XX:XX:XX:30, status: 0, reason: Disassociated because sending station is leaving (or has left) BSS (8)
Jan 17 09:24:04 wlceventd: CAP,F4:90: wlceventd_proc_event(414): eth7: Disassoc XX:XX:XX:XX:XX:30, status: 0, reason: Disassociated because sending station is leaving (or has left) BSS (8)
Jan 17 09:24:06 wlceventd: CAP,F4:90: wlceventd_proc_event(397): eth5: Deauth_ind XX:XX:XX:XX:XX:30, status: 0, reason: Unspecified reason (1)
Jan 17 09:24:06 wlceventd: CAP,F4:90: wlceventd_proc_event(414): eth5: Disassoc XX:XX:XX:XX:XX:30, status: 0, reason: Disassociated because sending station is leaving (or has left) BSS (8)
Jan 17 09:24:07 wlceventd: CAP,F4:90: wlceventd_proc_event(432): eth7: Auth XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)
Jan 17 09:24:07 wlceventd: CAP,F4:90: wlceventd_proc_event(460): eth7: Assoc XX:XX:XX:XX:XX:30, status: 0, reason: d11 RC reserved (0)

相关内容