I have the problem to understand from_DS, to_DS with Deauthentication packet,

deauthentication packets are type=Managment, FCfield managment and control frames always FROM_DS = 0 , TO_DS=0, rules for address fileds: addr1 is used for the receiver, addr2 for transmitter, addr3 used for filtering by receiver

but Deauthenticating packet can be sent from AccessPoint --> Station, and from Station ---> AccessPoint,

AccessPoint --> Station      
addr1= station(RA=DA) also this addres can be BROADCAST ff:ff:ff:ff:ff:ff
addr2= mac_ap (TA=SA) 
addr3= (BSSID)

Station--> AccessPoint 
addr1= mac_ap(RA=DA)
addr2= station(TA=SA)
addr3= mac_ap (BSSID)

how correct resolve all address from who to who send this packet, only with compare

if addr3 == addr2 this packet send from access point,
or something similar?

Do I have some fundamental misunderstanding of what's happening here?

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.