GTAC-Daisy Publish time 2019-9-25 10:59:11

Wireless Common STA Syslog

Edited by Daisy at 2019-9-27 11:18

Wireless Common STA Syslog

1. STA access normally

SyslogMeaning
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c):RSSI(50). Receiving auth frame
00:15:06:15: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6fa1): Auth succeed.Auth succeed
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives assoc frame from STA(4c0f.6e04.b57c):RSSI(50).Receives assoc frame
00:15:06:15: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6fa1): Assoc succeed.Assoc succeed
Caption: The accessprogress of STA include AuthandAssoc. After Assoc succeed, STA access wireless successfully. However if wantto access Internet,
need to complete some encryption auth so that can accesswireless internet.

2. STA use wrong password to access wpa2-pak SSID


SyslogMeaning
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c): RSSI(50).Receive auth frame
00:23:36:32: %WLAN-6-OUTPUT:STA(0026.5a08.6380) actives in BSSID(0a1b.b120.6fa1): Auth succeed.Auth succeed
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c): RSSI(50).Receive auth frame
00:23:36:32: %WLAN-6-OUTPUT:STA(0026.5a08.6380) actives in BSSID(0a1b.b120.6fa1): Auth succeed.Auth succeed
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives assoc frame from STA(4c0f.6e04.b57c):RSSI(50).Receive assoc frame
00:23:36:32: %WLAN-6-OUTPUT:STA(0026.5a08.6380) actives in BSSID(0a1b.b120.6fa1): Assoc succeed.Assoc succeed
00:23:36:37: %WLAN-6-80211N:STA(0026.5a08.6380) leaves BSSID(0a1b.b120.6fa1): STA disassoc, reasoncode(3).Four handshakes fail, disassoc
Caption: When STAuses wrong password to access SSID, auth succeed, assoc succeed, thenhandshakes fail, disassoc.
Because some network card send two auth frame, sohas two auth succeed log.

3. STA active disconnect

SyslogMeaning
01:00:09:47:%WLAN-6-80211N: STA(0026.5a08.6380) leaves BSSID(0a1b.b120.6fa1): STAdisassoc, reason code(3).
   
    *Jun 20 17:39:32.375: %WLAN-6-80211N: STA(a4ed.4e23.7ad4) leavesBSSID(0a0b.6bb1.d4d4): STA deauth, reason code(1),RSSI(27).
   
    %WLAN-6-80211N: STA(88c6.63d7.a164) leaves BSSID(0a1b.b120.0c1e): STAdisassoc, reason code(8)
   
    WLAN-6-80211N: STA(001b.8bed.94cb) leaves BSSID(0a1b.b120.0c1e): STAdeauth, reason code(3),
   
   STA active disassoc or deauth
Caption:When STA active disassociate, some network cards willsend disassoc frame, some send deauth frame, or send none. The another reasonwhy STA active disassociate may be that they haven't received the auth respor assoc reso packet from AP.


4. STA roaming successfully

SyslogMeaning
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c): RSSI(50).receive auth frame
00:17:33:04: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6976): Auth succeed.Auth succeed
00:17:33:04: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6976): Reasso succeed.Reasso succeed
Caption: STA roaming   from AP1 to AP2 whose signal is stronger. The AP2 will show Auth and Reassosucceed when roaming successfully.


5. STA roaming failed
SyslogMeaning
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c): RSSI(50).Receive auth frame
00:17:33:04: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6976): Auth succeed.Auth succeed
00:17:35:04: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6976): Reasso failed, statuscode(17).Reasso failed
Caption: When STAroaming failed, will show auth succeed first, and then show reasso failed

6. The RSSI of STA is too low to access

SyslogMeaning
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c): RSSI(50).Receive auth frame
00:17:42:15: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6fa1): Auth succeed.Auth succeed
00:17:42:15: %WLAN-6-80211N:STA(4c0f.6e04.b57c) fails to active in BSSID(0a1b.b120.6fa1): RSSI(54) toolow to join.The RSSI is too law to join
Caption: When therssi is lower than the limitation, the AP will refuse STA to associate toSSID

7. STA number reachs limit, AP reject new STA to associate
SyslogMeaning
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c): RSSI(50).Receive auth frame
00:17:45:21: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) actives in BSSID(0a1b.b120.6fa1): Auth succeed.Auth succeed
00:17:45:21: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) fails to active in BSSID(0a1b.b120.6fa1): STA numberreachs limit, status code(17).STA number reachs limit
00:17:45:21: %WLAN-6-OUTPUT:STA(4c0f.6e04.b57c) fails to active in BSSID(0a1b.b120.6fa1): Assoc failed,status code(17).STA assoc failed
Caption: STA numberreachs limit, AP reject new STA to associate


8. STA rate set mismatch,AP deny STA association

SyslogMeaning
00:01:10:49: %WLAN-6-80211N:BSSID(0a1b.b120.6fa1) receives auth frame from STA(4c0f.6e04.b57c): RSSI(50).Receive auth frame
%WLAN-6-OUTPUT: STA(4c0f.6e04.b57c)actives in BSSID(0a1b.b120.6fa1): Auth succeed.Auth succeed
%WLAN-6-80211N: STA(4c0f.6e04.b57c) failsto active in BSSID(0a1b.b120.6fa1): Rateset mismatch, status code(1).Rateset mismatch
Caption: STA mustsupport the rate set required by AP When associates AP. If it does notsupport, it will be rejected.

9. STA timeout
SyslogMeaning
00:17:56:16: %WLAN-6-80211N:STA(4c0f.6e04.b57c) is forced to leave BSSID(0a1b.b120.0c1e): STA timeout dueto inactivity,reason code(2).STA timeout, offline
Caption: When STAhas no data for more than a certain period of time (default 300 seconds), APconsiders STA timed out and kicks it offline

10. CWMP disconnection
SyslogMeaning
WLAN-6-80211N:STA(4c0f.6e04.b57c) is forced to leave BSSID(0a1b.b120.6f1b): The state ofvap had changed, deasso station,
    reason code(8)STA disassociate due to VAP state change
Caption: When thecwmp is disconnected. AP will auto delete the configuration and kicks allassociated STAs offline


11. STA was kicked offline
SyslogMeaning
00:18:05:45:%WLAN-6-80211N: STA(4c0f.6e04.b57c) is forced to leave BSSID(0a1b.b120.6fa1):Disassoc by APMG, reason code(8).STA connect to other SSID orroam to other AP,AP kick it offlinefrom the previous AP
    or SSID
00:18:05:46:%WLAN-6-80211N: STA(4c0f.6e04.b57c) fails to active in BSSID(0a1b.b120.6fa1):
    Data from unknown station.Because AP hasn't received thedisassociate frame from STA, so will show a ''Data from
   unknown station'' log to remind
Caption: Can kick aSTA offline manually on AC


12. STA is kicked offline due to low rx rate
SyslogMeaning
00:00:46:05:%WLAN-6-80211N: STA(78e4.00d3.1183) is forced to leave BSSID(0e1b.b120.5861):
    STA is kicked out due to low rx rate(35 Mbps),reason code(3).STA is kicked out due to low rx rate
Caption: Theassociated STA will be kicked offline if the rate is below the threshold.


13. The packet comes from the unkown STA
   SyslogMeaning
01:13:35:01:%WLAN-6-80211N: STA(0026.c7a2.a6fa) fails to active in BSSID(061b.b18e.37f4):
    Data from unknown station.AP receive unknown packet from STA
Caption:AP willdiscard the unknown packet immediately

14. WPA information element parsed error

   SyslogMeaning
"%WLAN-6-80211N:STA(7c61.9337.f036) fails to active in BSSID(061b.b120.0c23):
    WPA information element parsed error, reason code(13)"AP receives associate/reassociate packet, parse error, AP sendsdisassociate packet. STA associate failed



GTAC-Daisy Publish time 2019-9-27 11:18:16

Edited by Daisy at 2019-9-27 14:34

15. STA associate failed

Syslog Meaning
STA(4c0f.6e8c.6e8d) leavesBSSID(0a1b.b120.0c23): STA deauth, reason code(4)After STA sends the associationrequest, it does not receive the response from AP
    within the time-out period, finally STA sends the deauth message.

16. The main channel of Beacon frame is inconsistent with the working channel

Syslogmeaning
WLAN-6- BEACON_INIT: Work channel is 6,primary channel is 2When beacon is initialized, the main channel and the working channel areinconsistent.
WLAN-6- BEACON_UPT_CHECK1:Work channel is 6, primary channel is 2When the beacon is updated, theprimary channel is not the same as the working channel.
    The working channel will be assigned to the primary channel.
WLAN-6- BEACON_UPT: Work channel is 6,primary channel is 2When updating beacon, the mainchannel and the working channel are not consistent,
    and the channel will be revised.
WLAN-6- BEACON_UPT_CHECK: Work channel is6, primary channel is 2At the end of updating beacon,the inconsistency between the main channel and the
    working channel prompts that the channel will be revised.
WLAN-6- PRIMAR_CHECK: Work channel is 6,primary channel is 2The main channel and the workingchannel of beacon are not consistent before entering
    DMA, and the channel will not be revised at this time.

17. Receive STA PS poll frame and print the log that associated IDis null

   syslogMeaning
STA(7c61.93ec.aab7) is forced to leaveBSSID(061b.b122.5687): Client has NULL AID, reason code(7).Receive STA PS poll frame and print the log that associated IDis null
Caption: Sometimes, STA hasn't received the disassociate framefrom AP caused by wireless environment so that it think it still be online onAP and send ps poll frame to AP.
    After AP receive this frame from this STA, however can't find its information,AP will print this log. This is a normal log, won't affect the performance ofAP


GTAC-Henry Publish time 2021-8-23 13:59:46

very good tech sharing, very useful.
Pages: [1]
View full version: Wireless Common STA Syslog