Weird firewall log in 1.2.3 ?
-
Hello.
i have firewall logs that seem weird.
but the android phone that is connected by wlan to my pfsense router works correctly.
What do you think about that ?
Thank you.
Apr 20 01:14:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:15:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:15:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:15:56 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:15:56 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:16:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:16:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:16:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:16:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:17:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:17:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:17:56 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:17:56 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:18:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:18:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:18:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:18:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:19:52 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: group key handshake completed (RSN) Apr 20 01:20:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:20:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:20:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:20:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:21:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:21:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:21:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:21:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:22:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:22:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:22:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:22:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:23:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:23:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:23:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:23:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:24:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:24:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:24:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:24:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:25:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:25:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:25:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:25:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:26:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:26:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:26:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:26:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN) Apr 20 01:27:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request Apr 20 01:27:54 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated Apr 20 01:27:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated Apr 20 01:27:55 hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
-
Looks like the phone issued a disconnect command, deassociating from the AP. Probably when the phone went into power save mode and turned off its wifi radio.