aboutsummaryrefslogtreecommitdiffstats
path: root/src/l2_packet/l2_packet.h
diff options
context:
space:
mode:
authorDavide Caratti <davide.caratti@gmail.com>2018-03-28 14:34:56 (GMT)
committerJouni Malinen <j@w1.fi>2018-04-02 09:21:27 (GMT)
commitd89edb6112f54fb65036c31eba291bda5fcad2b3 (patch)
treee4beab3aa1f59b1162dbeab5ab333e2121025747 /src/l2_packet/l2_packet.h
parent8fb2b35735b47926ab0d5fd164c42c0e1b3399a6 (diff)
downloadhostap-d89edb6112f54fb65036c31eba291bda5fcad2b3.zip
hostap-d89edb6112f54fb65036c31eba291bda5fcad2b3.tar.gz
hostap-d89edb6112f54fb65036c31eba291bda5fcad2b3.tar.bz2
wpa_supplicant: Don't reply to EAPOL if pkt_type is PACKET_OTHERHOST
When wpa_supplicant is running on a Linux interface that is configured in promiscuous mode, and it is not a member of a bridge, incoming EAPOL packets are processed regardless of the Destination Address in the frame. As a consequence, there are situations where wpa_supplicant replies to EAPOL packets that are not destined for it. This behavior seems undesired (see IEEE Std 802.1X-2010, 11.4.a), and can be avoided by attaching a BPF filter that lets the kernel discard packets having pkt_type equal to PACKET_OTHERHOST. Signed-off-by: Davide Caratti <davide.caratti@gmail.com>
Diffstat (limited to 'src/l2_packet/l2_packet.h')
-rw-r--r--src/l2_packet/l2_packet.h1
1 files changed, 1 insertions, 0 deletions
diff --git a/src/l2_packet/l2_packet.h b/src/l2_packet/l2_packet.h
index 2a45245..5387177 100644
--- a/src/l2_packet/l2_packet.h
+++ b/src/l2_packet/l2_packet.h
@@ -42,6 +42,7 @@ struct l2_ethhdr {
enum l2_packet_filter_type {
L2_PACKET_FILTER_DHCP,
L2_PACKET_FILTER_NDISC,
+ L2_PACKET_FILTER_PKTTYPE,
};
/**