Quote:
|
Originally Posted by taipan
i tried it with wireshark and captured the deauth packets, but when i analysed the packets i saw the Receiver as "Broadcast" is it normal?, i think that deauthenticating must be directed not broadcast...
|
It is normal. Because the aireplay-ng deauth command does not include a specific client mac it is classified as broadcast as any client on the AP can recieve it. The deauth command can only come from the AP so aireplay-ng generates a packet coming from the target AP directed to either a client you specify or it just broadcasts it to all clients connected to that AP. Hope this answers your question.