Weird firewall log in 1.2.3 ?



  • Hello.

    i have firewall logs that seem weird.

    but the android phone that is connected by wlan to my pfsense router works correctly.

    What do you think about that ?

    Thank you.

    
    Apr 20 01:14:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:15:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:15:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:15:56
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:15:56
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:16:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:16:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:16:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:16:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:17:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:17:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:17:56
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:17:56
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:18:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:18:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:18:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:18:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:19:52
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: group key handshake completed (RSN)
    
    Apr 20 01:20:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:20:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:20:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:20:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:21:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:21:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:21:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:21:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:22:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:22:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:22:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:22:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:23:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:23:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:23:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:23:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:24:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:24:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:24:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:24:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:25:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:25:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:25:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:25:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:26:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:26:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:26:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:26:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    Apr 20 01:27:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deauthenticated due to local deauth request
    
    Apr 20 01:27:54
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: deassociated
    
    Apr 20 01:27:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 IEEE 802.11: associated
    
    Apr 20 01:27:55
    
    hostapd: ral0: STA 38:e7:d8:02:7b:e3 WPA: pairwise key handshake completed (RSN)
    
    

  • Rebel Alliance Developer Netgate

    Looks like the phone issued a disconnect command, deassociating from the AP. Probably when the phone went into power save mode and turned off its wifi radio.


Locked