[NEBULA] Deauth by STA Timeout reason 2

Hello Dean,

Nebula_Dean said:

@DerLord

The log is almost same as what @Carlos4311 said, if a station idle for too long, then the AP will de-associate the client.

The strange thing here is that the client is only disconnected while being fully active. While idling (over night for example) it stays connected.

Nebula_Dean said:

@DerLord

Is it possible to provide a snippet of the eventlogs while this happened? I will need to check unfiltered logs before and after the event 2 hours. Also I'll need sometime to try reproduce this locally, especially finding a S6 edge.

I'd love to, but I only have the free version of Nebula to be honest. The button for exporting logfiles is grayed out for me. If it helps; the S6 Edge is showing these network capabilities: "802.11ac, 802.11k/v".

Nebula_Dean said:

@DerLord

Another thing, did other androids or iOS device have the disconnection? and were they able to retry connecting or jump to another SSID?

No other client complained about this. I looked up the logs and all the clients showing the "reason 2" error are either reconnecting within a few seconds or have left the site anyways.
For some reason I'm getting a few "prev-Auth failed" errors (reason 2 again) now, but that doesn't seem to be critical.
I'm only having one active SSID on my site sending on 5GHz and 2.4GHz (Concurrent operation with band select active; great feature by the way!).

Nebula_Dean said:
@DerLord

When the station needs wifi on/off to recover, this is likely to be an NIC issue on the device, normally it should skip to another SSID if disconnection happens or internet loss. 

For me it looked like an error on the NIC aswell, but the client claims that it never happens at home.
She is using a regular "Telekom Speedport W724V Router", sending the same SSID on 2.4 and 5GHz.
If this issue would persist everywhere, I wouldn't have bothered any of you with this strange problem. I just can't figure out where the problem comes from.

If it helps:
The configuration of my site is pretty basic with WPA2-PSK authentication. No MAC-Filters, no isolation.
Android devices appear to activate Fast Transition (FT) per default, but turning this off doesn't seem to change anything.

I'm sorry to be that unhelpful.
Thank you for helping me out anyways!

Best wishes,
Niklas

Nebula_Dean said:

Hey Niklas @DerLord ,

As an alternative, perhaps you could filter the MAC of that S6 edge and copy paste it into and excel file, I am trying to look for abnormal log entries at or near the time the issue happened. 
Since you mentioned other clients are not having this issue, we can focus on this client for now.

Hello again,
thank you for your (impressingly fast) answere.

I feel a little stupid for asking, but what exactly should I copy-paste into the excel sheet?
Do you only need the MAC to get direct access to my logs or do I need to take some further steps?
Or should I mark everything on the "Event log" page surrounding the disconnection message?
Can I "PM" the Excel-Sheet to you or shall I attach it to this thread?

Nebula_Dean said:

Anyone with an S6 Edge in hand able to test this out too? 

Sadly I don't know anyone else.
Maybe someone else reading this thread can help us out.

Best wishes,
Niklas