| /** |
| \page ctrl_iface_page wpa_supplicant control interface |
| |
| wpa_supplicant implements a control interface that can be used by |
| external programs to control the operations of the wpa_supplicant |
| daemon and to get status information and event notifications. There is |
| a small C library, in a form of a single C file, \ref wpa_ctrl.c, that |
| provides helper functions to facilitate the use of the control |
| interface. External programs can link this file into them and then use |
| the library functions documented in \ref wpa_ctrl.h to interact with |
| wpa_supplicant. This library can also be used with C++. \ref wpa_cli.c and |
| wpa_gui are example programs using this library. |
| |
| There are multiple mechanisms for inter-process communication. For |
| example, Linux version of wpa_supplicant is using UNIX domain sockets |
| for the control interface and Windows version UDP sockets. The use of |
| the functions defined in \ref wpa_ctrl.h can be used to hide the details of |
| the used IPC from external programs. |
| |
| |
| \section using_ctrl_iface Using the control interface |
| |
| External programs, e.g., a GUI or a configuration utility, that need to |
| communicate with wpa_supplicant should link in \ref wpa_ctrl.c. This |
| allows them to use helper functions to open connection to the control |
| interface with \ref wpa_ctrl_open() and to send commands with |
| \ref wpa_ctrl_request(). |
| |
| wpa_supplicant uses the control interface for two types of communication: |
| commands and unsolicited event messages. Commands are a pair of |
| messages, a request from the external program and a response from |
| wpa_supplicant. These can be executed using \ref wpa_ctrl_request(). |
| Unsolicited event messages are sent by wpa_supplicant to the control |
| interface connection without specific request from the external program |
| for receiving each message. However, the external program needs to |
| attach to the control interface with \ref wpa_ctrl_attach() to receive these |
| unsolicited messages. |
| |
| If the control interface connection is used both for commands and |
| unsolicited event messages, there is potential for receiving an |
| unsolicited message between the command request and response. |
| \ref wpa_ctrl_request() caller will need to supply a callback, msg_cb, |
| for processing these messages. Often it is easier to open two |
| control interface connections by calling \ref wpa_ctrl_open() twice and |
| then use one of the connections for commands and the other one for |
| unsolicited messages. This way command request/response pairs will |
| not be broken by unsolicited messages. wpa_cli is an example of how |
| to use only one connection for both purposes and wpa_gui demonstrates |
| how to use two separate connections. |
| |
| Once the control interface connection is not needed anymore, it should |
| be closed by calling \ref wpa_ctrl_close(). If the connection was used for |
| unsolicited event messages, it should be first detached by calling |
| \ref wpa_ctrl_detach(). |
| |
| |
| \section ctrl_iface_cmds Control interface commands |
| |
| Following commands can be used with \ref wpa_ctrl_request(): |
| |
| \subsection ctrl_iface_PING PING |
| |
| This command can be used to test whether wpa_supplicant is replying |
| to the control interface commands. The expected reply is \c PONG if the |
| connection is open and wpa_supplicant is processing commands. |
| |
| |
| \subsection ctrl_iface_MIB MIB |
| |
| Request a list of MIB variables (dot1x, dot11). The output is a text |
| block with each line in \c variable=value format. For example: |
| |
| \verbatim |
| dot11RSNAOptionImplemented=TRUE |
| dot11RSNAPreauthenticationImplemented=TRUE |
| dot11RSNAEnabled=FALSE |
| dot11RSNAPreauthenticationEnabled=FALSE |
| dot11RSNAConfigVersion=1 |
| dot11RSNAConfigPairwiseKeysSupported=5 |
| dot11RSNAConfigGroupCipherSize=128 |
| dot11RSNAConfigPMKLifetime=43200 |
| dot11RSNAConfigPMKReauthThreshold=70 |
| dot11RSNAConfigNumberOfPTKSAReplayCounters=1 |
| dot11RSNAConfigSATimeout=60 |
| dot11RSNAAuthenticationSuiteSelected=00-50-f2-2 |
| dot11RSNAPairwiseCipherSelected=00-50-f2-4 |
| dot11RSNAGroupCipherSelected=00-50-f2-4 |
| dot11RSNAPMKIDUsed= |
| dot11RSNAAuthenticationSuiteRequested=00-50-f2-2 |
| dot11RSNAPairwiseCipherRequested=00-50-f2-4 |
| dot11RSNAGroupCipherRequested=00-50-f2-4 |
| dot11RSNAConfigNumberOfGTKSAReplayCounters=0 |
| dot11RSNA4WayHandshakeFailures=0 |
| dot1xSuppPaeState=5 |
| dot1xSuppHeldPeriod=60 |
| dot1xSuppAuthPeriod=30 |
| dot1xSuppStartPeriod=30 |
| dot1xSuppMaxStart=3 |
| dot1xSuppSuppControlledPortStatus=Authorized |
| dot1xSuppBackendPaeState=2 |
| dot1xSuppEapolFramesRx=0 |
| dot1xSuppEapolFramesTx=440 |
| dot1xSuppEapolStartFramesTx=2 |
| dot1xSuppEapolLogoffFramesTx=0 |
| dot1xSuppEapolRespFramesTx=0 |
| dot1xSuppEapolReqIdFramesRx=0 |
| dot1xSuppEapolReqFramesRx=0 |
| dot1xSuppInvalidEapolFramesRx=0 |
| dot1xSuppEapLengthErrorFramesRx=0 |
| dot1xSuppLastEapolFrameVersion=0 |
| dot1xSuppLastEapolFrameSource=00:00:00:00:00:00 |
| \endverbatim |
| |
| |
| \subsection ctrl_iface_STATUS STATUS |
| |
| Request current WPA/EAPOL/EAP status information. The output is a text |
| block with each line in \c variable=value format. For example: |
| |
| \verbatim |
| bssid=02:00:01:02:03:04 |
| ssid=test network |
| pairwise_cipher=CCMP |
| group_cipher=CCMP |
| key_mgmt=WPA-PSK |
| wpa_state=COMPLETED |
| ip_address=192.168.1.21 |
| Supplicant PAE state=AUTHENTICATED |
| suppPortStatus=Authorized |
| EAP state=SUCCESS |
| \endverbatim |
| |
| |
| \subsection ctrl_iface_STATUS-VERBOSE STATUS-VERBOSE |
| |
| Same as STATUS, but with more verbosity (i.e., more \c variable=value pairs). |
| |
| \verbatim |
| bssid=02:00:01:02:03:04 |
| ssid=test network |
| id=0 |
| pairwise_cipher=CCMP |
| group_cipher=CCMP |
| key_mgmt=WPA-PSK |
| wpa_state=COMPLETED |
| ip_address=192.168.1.21 |
| Supplicant PAE state=AUTHENTICATED |
| suppPortStatus=Authorized |
| heldPeriod=60 |
| authPeriod=30 |
| startPeriod=30 |
| maxStart=3 |
| portControl=Auto |
| Supplicant Backend state=IDLE |
| EAP state=SUCCESS |
| reqMethod=0 |
| methodState=NONE |
| decision=COND_SUCC |
| ClientTimeout=60 |
| \endverbatim |
| |
| |
| \subsection ctrl_iface_PMKSA PMKSA |
| |
| Show PMKSA cache |
| |
| \verbatim |
| Index / AA / PMKID / expiration (in seconds) / opportunistic |
| 1 / 02:00:01:02:03:04 / 000102030405060708090a0b0c0d0e0f / 41362 / 0 |
| 2 / 02:00:01:33:55:77 / 928389281928383b34afb34ba4212345 / 362 / 1 |
| \endverbatim |
| |
| |
| \subsection ctrl_iface_SET SET <variable> <value> |
| |
| Set variables: |
| - EAPOL::heldPeriod |
| - EAPOL::authPeriod |
| - EAPOL::startPeriod |
| - EAPOL::maxStart |
| - dot11RSNAConfigPMKLifetime |
| - dot11RSNAConfigPMKReauthThreshold |
| - dot11RSNAConfigSATimeout |
| |
| Example command: |
| \verbatim |
| SET EAPOL::heldPeriod 45 |
| \endverbatim |
| |
| |
| \subsection ctrl_iface_LOGON LOGON |
| |
| IEEE 802.1X EAPOL state machine logon. |
| |
| |
| \subsection ctrl_iface_LOGOFF LOGOFF |
| |
| IEEE 802.1X EAPOL state machine logoff. |
| |
| |
| \subsection ctrl_iface_REASSOCIATE REASSOCIATE |
| |
| Force reassociation. |
| |
| |
| \subsection ctrl_iface_RECONNECT RECONNECT |
| |
| Connect if disconnected (i.e., like \c REASSOCIATE, but only connect |
| if in disconnected state). |
| |
| |
| \subsection ctrl_iface_PREAUTH PREAUTH <BSSID> |
| |
| Start pre-authentication with the given BSSID. |
| |
| |
| \subsection ctrl_iface_ATTACH ATTACH |
| |
| Attach the connection as a monitor for unsolicited events. This can |
| be done with \ref wpa_ctrl_attach(). |
| |
| |
| \subsection ctrl_iface_DETACH DETACH |
| |
| Detach the connection as a monitor for unsolicited events. This can |
| be done with \ref wpa_ctrl_detach(). |
| |
| |
| \subsection ctrl_iface_LEVEL LEVEL <debug level> |
| |
| Change debug level. |
| |
| |
| \subsection ctrl_iface_RECONFIGURE RECONFIGURE |
| |
| Force wpa_supplicant to re-read its configuration data. |
| |
| |
| \subsection ctrl_iface_TERMINATE TERMINATE |
| |
| Terminate wpa_supplicant process. |
| |
| |
| \subsection ctrl_iface_BSSID BSSID <network id> <BSSID> |
| |
| Set preferred BSSID for a network. Network id can be received from the |
| \c LIST_NETWORKS command output. |
| |
| |
| \subsection ctrl_iface_LIST_NETWORKS LIST_NETWORKS |
| |
| List configured networks. |
| |
| \verbatim |
| network id / ssid / bssid / flags |
| 0 example network any [CURRENT] |
| \endverbatim |
| |
| (note: fields are separated with tabs) |
| |
| |
| \subsection ctrl_iface_DISCONNECT DISCONNECT |
| |
| Disconnect and wait for \c REASSOCIATE or \c RECONNECT command before |
| connecting. |
| |
| |
| \subsection ctrl_iface_SCAN SCAN |
| |
| Request a new BSS scan. |
| |
| |
| \subsection ctrl_iface_SCAN_RESULTS SCAN_RESULTS |
| |
| Get the latest scan results. |
| |
| \verbatim |
| bssid / frequency / signal level / flags / ssid |
| 00:09:5b:95:e0:4e 2412 208 [WPA-PSK-CCMP] jkm private |
| 02:55:24:33:77:a3 2462 187 [WPA-PSK-TKIP] testing |
| 00:09:5b:95:e0:4f 2412 209 jkm guest |
| \endverbatim |
| |
| (note: fields are separated with tabs) |
| |
| |
| \subsection ctrl_iface_BSS BSS |
| |
| Get detailed per-BSS scan results. \c BSS command can be used to |
| iterate through scan results one BSS at a time and to fetch all |
| information from the found BSSes. This provides access to the same |
| data that is available through \c SCAN_RESULTS but in a way that |
| avoids problems with large number of scan results not fitting in the |
| ctrl_iface messages. |
| |
| There are two options for selecting the BSS with the \c BSS command: |
| "BSS <idx>" requests information for the BSS identified by the index |
| (0 .. size-1) in the scan results table and "BSS <BSSID>" requests |
| information for the given BSS (based on BSSID in 00:01:02:03:04:05 |
| format). |
| |
| BSS information is presented in following format. Please note that new |
| fields may be added to this field=value data, so the ctrl_iface user |
| should be prepared to ignore values it does not understand. |
| |
| \verbatim |
| bssid=00:09:5b:95:e0:4e |
| freq=2412 |
| beacon_int=0 |
| capabilities=0x0011 |
| qual=51 |
| noise=161 |
| level=212 |
| tsf=0000000000000000 |
| ie=000b6a6b6d2070726976617465010180dd180050f20101000050f20401000050f20401000050f2020000 |
| ssid=jkm private |
| \endverbatim |
| |
| |
| |
| \subsection ctrl_iface_SELECT_NETWORK SELECT_NETWORK <network id> |
| |
| Select a network (disable others). Network id can be received from the |
| \c LIST_NETWORKS command output. |
| |
| |
| \subsection ctrl_iface_ENABLE_NETWORK ENABLE_NETWORK <network id> |
| |
| Enable a network. Network id can be received from the |
| \c LIST_NETWORKS command output. Special network id \c all can be |
| used to enable all network. |
| |
| |
| \subsection ctrl_iface_DISABLE_NETWORK DISABLE_NETWORK <network id> |
| |
| Disable a network. Network id can be received from the |
| \c LIST_NETWORKS command output. Special network id \c all can be |
| used to disable all network. |
| |
| |
| \subsection ctrl_iface_ADD_NETWORK ADD_NETWORK |
| |
| Add a new network. This command creates a new network with empty |
| configuration. The new network is disabled and once it has been |
| configured it can be enabled with \c ENABLE_NETWORK command. \c ADD_NETWORK |
| returns the network id of the new network or FAIL on failure. |
| |
| |
| \subsection ctrl_iface_REMOVE_NETWORK REMOVE_NETWORK <network id> |
| |
| Remove a network. Network id can be received from the |
| \c LIST_NETWORKS command output. Special network id \c all can be |
| used to remove all network. |
| |
| |
| \subsection ctrl_iface_SET_NETWORK SET_NETWORK <network id> <variable> <value> |
| |
| Set network variables. Network id can be received from the |
| \c LIST_NETWORKS command output. |
| |
| This command uses the same variables and data formats as the |
| configuration file. See example wpa_supplicant.conf for more details. |
| |
| - ssid (network name, SSID) |
| - psk (WPA passphrase or pre-shared key) |
| - key_mgmt (key management protocol) |
| - identity (EAP identity) |
| - password (EAP password) |
| - ... |
| |
| |
| \subsection ctrl_iface_GET_NETWORK GET_NETWORK <network id> <variable> |
| |
| Get network variables. Network id can be received from the |
| \c LIST_NETWORKS command output. |
| |
| |
| \subsection ctrl_iface_SAVE_CONFIG SAVE_CONFIG |
| |
| Save the current configuration. |
| |
| |
| \subsection ctrl_iface_P2P_FIND P2P_FIND |
| |
| Start P2P device discovery. Optional parameter can be used to specify |
| the duration for the discovery in seconds (e.g., "P2P_FIND 5"). If the |
| duration is not specified, discovery will be started for indefinite |
| time, i.e., until it is terminated by P2P_STOP_FIND or P2P_CONNECT (to |
| start group formation with a discovered peer). |
| |
| The default search type is to first run a full scan of all channels |
| and then continue scanning only social channels (1, 6, 11). This |
| behavior can be changed by specifying a different search type: social |
| (e.g., "P2P_FIND 5 type=social") will skip the initial full scan and |
| only search social channels; progressive (e.g., "P2P_FIND |
| type=progressive") starts with a full scan and then searches |
| progressively through all channels one channel at the time with the |
| social channel scans. Progressive device discovery can be used to find |
| new groups (and groups that were not found during the initial scan, |
| e.g., due to the GO being asleep) over time without adding |
| considerable extra delay for every Search state round. |
| |
| |
| \subsection ctrl_iface_P2P_STOP_FIND P2P_STOP_FIND |
| |
| Stop ongoing P2P device discovery or other operation (connect, listen |
| mode). |
| |
| |
| \subsection ctrl_iface_P2P_CONNECT P2P_CONNECT |
| |
| Start P2P group formation with a discovered P2P peer. This includes |
| group owner negotiation, group interface setup, provisioning, and |
| establishing data connection. |
| |
| P2P_CONNECT <peer device address> <pbc|pin|PIN#> |
| [label|display|keypad] [persistent] [join|auth] [go_intent=<0..15>] |
| |
| Start P2P group formation with a discovered P2P peer. This includes |
| optional group owner negotiation, group interface setup, provisioning, |
| and establishing data connection. |
| |
| The <pbc|pin|PIN#> parameter specifies the WPS provisioning |
| method. "pbc" string starts pushbutton method, "pin" string start PIN |
| method using an automatically generated PIN (which will be returned as |
| the command return code), PIN# means that a pre-selected PIN can be |
| used (e.g., 12345670). [label|display|keypad] is used with PIN method |
| to specify which PIN is used (label=PIN from local label, |
| display=dynamically generated random PIN from local display, |
| keypad=PIN entered from peer device label or display). "persistent" |
| parameter can be used to request a persistent group to be formed. |
| |
| "join" indicates that this is a command to join an existing group as a |
| client. It skips the GO Negotiation part. |
| |
| "auth" indicates that the WPS parameters are authorized for the peer |
| device without actually starting GO Negotiation (i.e., the peer is |
| expected to initiate GO Negotiation). This is mainly for testing |
| purposes. |
| |
| The optional "go_intent" parameter can be used to override the default |
| GO Intent value. |
| |
| |
| \subsection ctrl_iface_P2P_LISTEN P2P_LISTEN |
| |
| Start Listen-only state. Optional parameter can be used to specify the |
| duration for the Listen operation in seconds. This command may not |
| be of that much use during normal operations and is mainly designed |
| for testing. It can also be used to keep the device discoverable |
| without having to maintain a group. |
| |
| |
| \subsection ctrl_iface_P2P_GROUP_REMOVE P2P_GROUP_REMOVE |
| |
| Terminate a P2P group. If a new virtual network interface was used for |
| the group, it will also be removed. The network interface name of the |
| group interface is used as a parameter for this command. |
| |
| |
| \subsection ctrl_iface_P2P_GROUP_ADD P2P_GROUP_ADD |
| |
| Set up a P2P group owner manually (i.e., without group owner |
| negotiation with a specific peer). This is also known as autonomous |
| GO. Optional persistent=<network id> can be used to specify restart of |
| a persistent group. |
| |
| |
| \subsection ctrl_iface_P2P_PROV_DISC P2P_PROV_DISC |
| |
| Send P2P provision discovery request to the specified peer. The |
| parameters for this command are the P2P device address of the peer and |
| the desired configuration method. For example, "P2P_PROV_DISC |
| 02:01:02:03:04:05 display" would request the peer to display a PIN for |
| us and "P2P_PROV_DISC 02:01:02:03:04:05 keypad" would request the peer |
| to enter a PIN that we display. |
| |
| |
| \subsection ctrl_iface_P2P_GET_PASSPHRASE P2P_GET_PASSPHRASE |
| |
| Get the passphrase for a group (only available when acting as a GO). |
| |
| |
| \subsection ctrl_iface_P2P_SERV_DISC_REQ P2P_SERV_DISC_REQ |
| |
| Schedule a P2P service discovery request. The parameters for this |
| command are the device address of the peer device (or 00:00:00:00:00:00 |
| for wildcard query that is sent to every discovered P2P peer that |
| supports service discovery) and P2P Service Query TLV(s) as hexdump. |
| For example, "P2P_SERV_DISC_REQ 00:00:00:00:00:00 02000001" schedules |
| a request for listing all supported service discovery protocols and |
| requests this to be sent to all discovered peers. The pending requests |
| are sent during device discovery (see \ref ctrl_iface_P2P_FIND). |
| |
| This command returns an identifier for the pending query (e.g., |
| "1f77628") that can be used to cancel the request. Directed requests |
| will be automatically removed when the specified peer has replied to |
| it. |
| |
| |
| \subsection ctrl_iface_P2P_SERV_DISC_CANCEL_REQ P2P_SERV_DISC_CANCEL_REQ |
| |
| Cancel a pending P2P service discovery request. This command takes a |
| single parameter: identifier for the pending query (the value returned |
| by \ref ctrl_iface_P2P_SERV_DISC_REQ), e.g., |
| "P2P_SERV_DISC_CANCEL_REQ 1f77628". |
| |
| |
| \subsection ctrl_iface_P2P_SERV_DISC_RESP P2P_SERV_DISC_RESP |
| |
| Reply to a service discovery query. This command takes following |
| parameters: frequency in MHz, destination address, dialog token, |
| response TLV(s). The first three parameters are copied from the |
| request event. For example, |
| "P2P_SERV_DISC_RESP 2437 02:40:61:c2:f3:b7 1 0300000101". |
| |
| |
| \subsection ctrl_iface_P2P_SERVICE_UPDATE P2P_SERVICE_UPDATE |
| |
| Indicate that local services have changed. This is used to increment |
| the P2P service indicator value so that peers know when previously |
| cached information may have changed. |
| |
| |
| \subsection ctrl_iface_P2P_SERV_DISC_EXTERNAL P2P_SERV_DISC_EXTERNAL |
| |
| Configure external processing of P2P service requests: 0 (default) = |
| no external processing of requests (i.e., internal code will reject |
| each request), 1 = external processing of requests (external program |
| is responsible for replying to service discovery requests with |
| \ref ctrl_iface_P2P_SERV_DISC_RESP). |
| |
| |
| \subsection ctrl_iface_P2P_REJECT P2P_REJECT |
| |
| Reject connection attempt from a peer (specified with a device |
| address). This is a mechanism to reject a pending GO Negotiation with |
| a peer and request to automatically block any further connection or |
| discovery of the peer. |
| |
| |
| \subsection ctrl_iface_P2P_INVITE P2P_INVITE |
| |
| Invite a peer to join a group or to (re)start a persistent group. |
| |
| |
| \subsection ctrl_iface_P2P_PEER P2P_PEER |
| |
| Fetch information about a discovered peer. This command takes in an |
| argument specifying which peer to select: P2P Device Address of the |
| peer, "FIRST" to indicate the first peer in the list, or "NEXT-<P2P |
| Device Address>" to indicate the entry following the specified peer |
| (to allow for iterating through the list). |
| |
| |
| \subsection ctrl_iface_P2P_EXT_LISTEN P2P_EXT_LISTEN |
| |
| Enable/disable extended listen timing. Without parameters, this |
| command disables extended listen timing. When enabling the feature, |
| two parameters are used: availibility period and availability interval |
| (both in milliseconds and with range of 1-65535). |
| |
| |
| \section ctrl_iface_interactive Interactive requests |
| |
| If wpa_supplicant needs additional information during authentication |
| (e.g., password), it will use a specific prefix, \c CTRL-REQ- |
| (\a WPA_CTRL_REQ macro) in an unsolicited event message. An external |
| program, e.g., a GUI, can provide such information by using |
| \c CTRL-RSP- (\a WPA_CTRL_RSP macro) prefix in a command with matching |
| field name. |
| |
| The following fields can be requested in this way from the user: |
| - IDENTITY (EAP identity/user name) |
| - PASSWORD (EAP password) |
| - NEW_PASSWORD (New password if the server is requesting password change) |
| - PIN (PIN code for accessing a SIM or smartcard) |
| - OTP (one-time password; like password, but the value is used only once) |
| - PASSPHRASE (passphrase for a private key file) |
| |
| \verbatim |
| CTRL-REQ-<field name>-<network id>-<human readable text> |
| CTRL-RSP-<field name>-<network id>-<value> |
| \endverbatim |
| |
| For example, request from wpa_supplicant: |
| \verbatim |
| CTRL-REQ-PASSWORD-1-Password needed for SSID test-network |
| \endverbatim |
| |
| And a matching reply from the GUI: |
| \verbatim |
| CTRL-RSP-PASSWORD-1-secret |
| \endverbatim |
| |
| |
| \subsection ctrl_iface_GET_CAPABILITY GET_CAPABILITY <option> [strict] |
| |
| Get list of supported functionality (eap, pairwise, group, |
| proto). Supported functionality is shown as space separate lists of |
| values used in the same format as in wpa_supplicant configuration. |
| If optional argument, 'strict', is added, only the values that the |
| driver claims to explicitly support are included. Without this, all |
| available capabilities are included if the driver does not provide |
| a mechanism for querying capabilities. |
| |
| Example request/reply pairs: |
| |
| \verbatim |
| GET_CAPABILITY eap |
| AKA FAST GTC LEAP MD5 MSCHAPV2 OTP PAX PEAP PSK SIM TLS TTLS |
| \endverbatim |
| |
| \verbatim |
| GET_CAPABILITY pairwise |
| CCMP TKIP NONE |
| \endverbatim |
| |
| \verbatim |
| GET_CAPABILITY pairwise strict |
| \endverbatim |
| |
| \verbatim |
| GET_CAPABILITY group |
| CCMP TKIP WEP104 WEP40 |
| \endverbatim |
| |
| \verbatim |
| GET_CAPABILITY key_mgmt |
| WPA-PSK WPA-EAP IEEE8021X NONE |
| \endverbatim |
| |
| \verbatim |
| GET_CAPABILITY proto |
| RSN WPA |
| \endverbatim |
| |
| \verbatim |
| GET_CAPABILITY auth_alg |
| OPEN SHARED LEAP |
| \endverbatim |
| |
| |
| \subsection ctrl_iface_AP_SCAN AP_SCAN <ap_scan value> |
| |
| Change ap_scan value: |
| 0 = no scanning, |
| 1 = wpa_supplicant requests scans and uses scan results to select the AP, |
| 2 = wpa_supplicant does not use scanning and just requests driver to |
| associate and take care of AP selection |
| |
| |
| \subsection ctrl_iface_INTERFACES INTERFACES |
| |
| List configured interfaces. |
| |
| \verbatim |
| wlan0 |
| eth0 |
| \endverbatim |
| |
| |
| \section ctrl_iface_events Control interface events |
| |
| wpa_supplicant generates number messages based on events like |
| connection or a completion of a task. These are available to external |
| programs that attach to receive unsolicited messages over the control |
| interface with \ref wpa_ctrl_attach(). |
| |
| The event messages will be delivered over the attach control interface |
| as text strings that start with the priority level of the message and |
| a fixed prefix text as defined in \ref wpa_ctrl.h. After this, optional |
| additional information may be included depending on the event |
| message. For example, following event message is delivered when new |
| scan results are available: |
| |
| \verbatim |
| <2>CTRL-EVENT-SCAN-RESULTS |
| \endverbatim |
| |
| Following priority levels are used: |
| - 0 = MSGDUMP |
| - 1 = DEBUG |
| - 2 = INFO |
| - 3 = WARNING |
| - 4 = ERROR |
| |
| By default, any priority level greater than equal to 2 (INFO) are |
| delivered over the attached control interface. LEVEL command can be |
| used to set the level of messages which will be delivered. It should |
| be noted that there are many debug messages that do not include any |
| particulat prefix and are subject to change. They may be used for |
| debug information, but can usually be ignored by external programs. |
| |
| In most cases, the external program can skip over the priority field |
| in the beginning of the event message and then compare the following |
| text to the event strings from \ref wpa_ctrl.h that the program is |
| interested in processing. |
| |
| Following subsections describe the most common event notifications |
| generated by wpa_supplicant. |
| |
| \subsection ctrl_iface_event_CTRL_REQ CTRL-REQ- |
| |
| WPA_CTRL_REQ: Request information from a user. See |
| \ref ctrl_iface_interactive "Interactive requests" sections for more |
| details. |
| |
| \subsection ctrl_iface_event_CONNECTED CTRL-EVENT-CONNECTED |
| |
| WPA_EVENT_CONNECTED: Indicate successfully completed authentication |
| and that the data connection is now enabled. |
| |
| \subsection ctrl_iface_event_DISCONNECTED CTRL-EVENT-DISCONNECTED |
| |
| WPA_EVENT_DISCONNECTED: Disconnected, data connection is not available |
| |
| \subsection ctrl_iface_event_TERMINATING CTRL-EVENT-TERMINATING |
| |
| WPA_EVENT_TERMINATING: wpa_supplicant is exiting |
| |
| \subsection ctrl_iface_event_PASSWORD_CHANGED CTRL-EVENT-PASSWORD-CHANGED |
| |
| WPA_EVENT_PASSWORD_CHANGED: Password change was completed successfully |
| |
| \subsection ctrl_iface_event_EAP_NOTIFICATION CTRL-EVENT-EAP-NOTIFICATION |
| |
| WPA_EVENT_EAP_NOTIFICATION: EAP-Request/Notification received |
| |
| \subsection ctrl_iface_event_EAP_STARTED CTRL-EVENT-EAP-STARTED |
| |
| WPA_EVENT_EAP_STARTED: EAP authentication started (EAP-Request/Identity |
| received) |
| |
| \subsection ctrl_iface_event_EAP_METHOD CTRL-EVENT-EAP-METHOD |
| |
| WPA_EVENT_EAP_METHOD: EAP method selected |
| |
| \subsection ctrl_iface_event_EAP_SUCCESS CTRL-EVENT-EAP-SUCCESS |
| |
| WPA_EVENT_EAP_SUCCESS: EAP authentication completed successfully |
| |
| \subsection ctrl_iface_event_EAP_FAILURE CTRL-EVENT-EAP-FAILURE |
| |
| WPA_EVENT_EAP_FAILURE: EAP authentication failed (EAP-Failure received) |
| |
| \subsection ctrl_iface_event_SCAN_RESULTS CTRL-EVENT-SCAN-RESULTS |
| |
| WPA_EVENT_SCAN_RESULTS: New scan results available |
| |
| \subsection ctrl_iface_event_BSS_ADDED CTRL-EVENT-BSS-ADDED |
| |
| WPA_EVENT_BSS_ADDED: A new BSS entry was added. The event prefix is |
| followed by the BSS entry id and BSSID. |
| |
| \verbatim |
| CTRL-EVENT-BSS-ADDED 34 00:11:22:33:44:55 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_BSS_REMOVED CTRL-EVENT-BSS-REMOVED |
| |
| WPA_EVENT_BSS_REMOVED: A BSS entry was removed. The event prefix is |
| followed by BSS entry id and BSSID. |
| |
| \verbatim |
| CTRL-EVENT-BSS-REMOVED 34 00:11:22:33:44:55 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_WPS_OVERLAP_DETECTED WPS-OVERLAP-DETECTED |
| |
| WPS_EVENT_OVERLAP: WPS overlap detected in PBC mode |
| |
| \subsection ctrl_iface_event_WPS_AP_AVAILABLE_PBC WPS-AP-AVAILABLE-PBC |
| |
| WPS_EVENT_AP_AVAILABLE_PBC: Available WPS AP with active PBC found in |
| scan results. |
| |
| \subsection ctrl_iface_event_WPS_AP_AVAILABLE_PIN WPS-AP-AVAILABLE-PIN |
| |
| WPS_EVENT_AP_AVAILABLE_PIN: Available WPS AP with recently selected PIN |
| registrar found in scan results. |
| |
| \subsection ctrl_iface_event_WPS_AP_AVAILABLE WPS-AP-AVAILABLE |
| |
| WPS_EVENT_AP_AVAILABLE: Available WPS AP found in scan results |
| |
| \subsection ctrl_iface_event_WPS_CRED_RECEIVED WPS-CRED-RECEIVED |
| |
| WPS_EVENT_CRED_RECEIVED: A new credential received |
| |
| \subsection ctrl_iface_event_WPS_M2D WPS-M2D |
| |
| WPS_EVENT_M2D: M2D received |
| |
| \subsection ctrl_iface_event_WPS_FAIL |
| |
| WPS_EVENT_FAIL: WPS registration failed after M2/M2D |
| |
| \subsection ctrl_iface_event_WPS_SUCCESS WPS-SUCCESS |
| |
| WPS_EVENT_SUCCESS: WPS registration completed successfully |
| |
| \subsection ctrl_iface_event_WPS_TIMEOUT WPS-TIMEOUT |
| |
| WPS_EVENT_TIMEOUT: WPS enrollment attempt timed out and was terminated |
| |
| \subsection ctrl_iface_event_WPS_ENROLLEE_SEEN WPS-ENROLLEE-SEEN |
| |
| WPS_EVENT_ENROLLEE_SEEN: WPS Enrollee was detected (used in AP mode). |
| The event prefix is followed by MAC addr, UUID-E, pri dev type, |
| config methods, dev passwd id, request type, [dev name]. |
| |
| \verbatim |
| WPS-ENROLLEE-SEEN 02:00:00:00:01:00 |
| 572cf82f-c957-5653-9b16-b5cfb298abf1 1-0050F204-1 0x80 4 1 |
| [Wireless Client] |
| \endverbatim |
| |
| \subsection ctrl_iface_event_WPS_ER_AP_ADD WPS-ER-AP-ADD |
| |
| WPS_EVENT_ER_AP_ADD: WPS ER discovered an AP |
| |
| \verbatim |
| WPS-ER-AP-ADD 87654321-9abc-def0-1234-56789abc0002 02:11:22:33:44:55 |
| pri_dev_type=6-0050F204-1 wps_state=1 |Very friendly name|Company| |
| Long description of the model|WAP|http://w1.fi/|http://w1.fi/hostapd/ |
| \endverbatim |
| |
| \subsection ctrl_iface_event_WPS_ER_AP_REMOVE WPS-ER-AP-REMOVE |
| |
| WPS_EVENT_ER_AP_REMOVE: WPS ER removed an AP entry |
| |
| \verbatim |
| WPS-ER-AP-REMOVE 87654321-9abc-def0-1234-56789abc0002 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_WPS_ER_ENROLLEE_ADD WPS-ER-ENROLLEE-ADD |
| |
| WPS_EVENT_ER_ENROLLEE_ADD: WPS ER discovered a new Enrollee |
| |
| \verbatim |
| WPS-ER-ENROLLEE-ADD 2b7093f1-d6fb-5108-adbb-bea66bb87333 |
| 02:66:a0:ee:17:27 M1=1 config_methods=0x14d dev_passwd_id=0 |
| pri_dev_type=1-0050F204-1 |
| |Wireless Client|Company|cmodel|123|12345| |
| \endverbatim |
| |
| \subsection ctrl_iface_event_WPS_ER_ENROLLEE_REMOVE WPS-ER-ENROLLEE-REMOVE |
| |
| WPS_EVENT_ER_ENROLLEE_REMOVE: WPS ER removed an Enrollee entry |
| |
| \verbatim |
| WPS-ER-ENROLLEE-REMOVE 2b7093f1-d6fb-5108-adbb-bea66bb87333 |
| 02:66:a0:ee:17:27 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_WPS_PIN_NEEDED WPS-PIN-NEEDED |
| |
| WPS_EVENT_PIN_NEEDED: PIN is needed to complete provisioning with an |
| Enrollee. This is followed by information about the Enrollee (UUID, |
| MAC address, device name, manufacturer, model name, model number, |
| serial number, primary device type). |
| \verbatim |
| WPS-PIN-NEEDED 5a02a5fa-9199-5e7c-bc46-e183d3cb32f7 02:2a:c4:18:5b:f3 |
| [Wireless Client|Company|cmodel|123|12345|1-0050F204-1] |
| \endverbatim |
| |
| \subsection ctrl_iface_event_WPS_NEW_AP_SETTINGS WPS-NEW-AP-SETTINGS |
| |
| WPS_EVENT_NEW_AP_SETTINGS: New AP settings were received |
| |
| \subsection ctrl_iface_event_WPS_REG_SUCCESS WPS-REG-SUCCESS |
| |
| WPS_EVENT_REG_SUCCESS: WPS provisioning was completed successfully |
| (AP/Registrar) |
| |
| \subsection ctrl_iface_event_WPS_AP_SETUP_LOCKED WPS-AP-SETUP-LOCKED |
| |
| WPS_EVENT_AP_SETUP_LOCKED: AP changed into setup locked state due to |
| multiple failed configuration attempts using the AP PIN. |
| |
| \subsection ctrl_iface_event_AP_STA_CONNECTED AP-STA-CONNECTED |
| |
| AP_STA_CONNECTED: A station associated with us (AP mode event). The |
| event prefix is followed by the MAC address of the station. |
| |
| \verbatim |
| AP-STA-CONNECTED 02:2a:c4:18:5b:f3 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_AP_STA_DISCONNECTED AP-STA-DISCONNECTED |
| |
| AP_STA_DISCONNECTED: A station disassociated (AP mode event) |
| |
| \verbatim |
| AP-STA-DISCONNECTED 02:2a:c4:18:5b:f3 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_DEVICE_FOUND P2P-DEVICE-FOUND |
| |
| P2P_EVENT_DEVICE_FOUND: Indication of a discovered P2P device with |
| information about that device. |
| |
| \verbatim |
| P2P-DEVICE-FOUND 02:b5:64:63:30:63 p2p_dev_addr=02:b5:64:63:30:63 |
| pri_dev_type=1-0050f204-1 name='Wireless Client' config_methods=0x84 |
| dev_capab=0x21 group_capab=0x0 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_GO_NEG_REQUEST P2P-GO-NEG-REQUEST |
| |
| P2P_EVENT_GO_NEG_REQUEST: A P2P device requested GO negotiation, but we |
| were not ready to start the negotiation. |
| |
| \verbatim |
| P2P-GO-NEG-REQUEST 02:40:61:c2:f3:b7 dev_passwd_id=4 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_GO_NEG_SUCCESS P2P-GO-NEG-SUCCESS |
| |
| P2P_EVENT_GO_NEG_SUCCESS: Indication of successfully complete group |
| owner negotiation. |
| |
| \subsection ctrl_iface_event_P2P_EVENT_GO_NEG_FAILURE P2P-GO-NEG-FAILURE |
| |
| P2P_EVENT_GO_NEG_FAILURE: Indication of failed group owner negotiation. |
| |
| \subsection ctrl_iface_event_P2P_EVENT_GROUP_FORMATION_SUCCESS P2P-GROUP-FORMATION-SUCCESS |
| |
| P2P_EVENT_GROUP_FORMATION_SUCCESS: Indication that P2P group formation |
| has been completed successfully. |
| |
| \subsection ctrl_iface_event_P2P_EVENT_GROUP_FORMATION_FAILURE P2P-GROUP-FORMATION-FAILURE |
| |
| P2P_EVENT_GROUP_FORMATION_FAILURE: Indication that P2P group formation |
| failed (e.g., due to provisioning failure or timeout). |
| |
| \subsection ctrl_iface_event_P2P_EVENT_GROUP_STARTED P2P-GROUP-STARTED |
| |
| P2P_EVENT_GROUP_STARTED: Indication of a new P2P group having been |
| started. Additional parameters: network interface name for the group, |
| role (GO/client), SSID. The passphrase used in the group is also |
| indicated here if known (on GO) or PSK (on client). If the group is a |
| persistent one, a flag indicating that is included. |
| |
| \verbatim |
| P2P-GROUP-STARTED wlan0-p2p-0 GO ssid="DIRECT-3F Testing" |
| passphrase="12345678" go_dev_addr=02:40:61:c2:f3:b7 [PERSISTENT] |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_GROUP_REMOVED P2P-GROUP-REMOVED |
| |
| P2P_EVENT_GROUP_REMOVED: Indication of a P2P group having been removed. |
| Additional parameters: network interface name for the group, role |
| (GO/client). |
| |
| \verbatim |
| P2P-GROUP-REMOVED wlan0-p2p-0 GO |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_SHOW_PIN P2P-PROV-DISC-SHOW-PIN |
| |
| P2P_EVENT_PROV_DISC_SHOW_PIN: Request from the peer for us to display |
| a PIN that will be entered on the peer. The following parameters are |
| included after the event prefix: peer_address PIN. The PIN is a |
| random PIN generated for this connection. P2P_CONNECT command can be |
| used to accept the request with the same PIN configured for the |
| connection. |
| |
| \verbatim |
| P2P-PROV-DISC-SHOW-PIN 02:40:61:c2:f3:b7 12345670 |
| p2p_dev_addr=02:40:61:c2:f3:b7 pri_dev_type=1-0050F204-1 name='Test' |
| config_methods=0x188 dev_capab=0x21 group_capab=0x0 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_ENTER_PIN P2P-PROV-DISC-ENTER-PIN |
| |
| P2P_EVENT_PROV_DISC_ENTER_PIN: Request from the peer for us to enter a |
| PIN displayed on the peer. The following parameter is included after |
| the event prefix: peer address. |
| |
| \verbatim |
| P2P-PROV-DISC-ENTER-PIN 02:40:61:c2:f3:b7 p2p_dev_addr=02:40:61:c2:f3:b7 |
| pri_dev_type=1-0050F204-1 name='Test' config_methods=0x188 |
| dev_capab=0x21 group_capab=0x0 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_PBC_REQ P2P-PROV-DISC-PBC-REQ |
| |
| P2P_EVENT_PROV_DISC_PBC_REQ: Request from the peer for us to connect |
| using PBC. The following parameters are included after the event prefix: |
| peer_address. P2P_CONNECT command can be used to accept the request. |
| |
| \verbatim |
| P2P-PROV-DISC-PBC-REQ 02:40:61:c2:f3:b7 p2p_dev_addr=02:40:61:c2:f3:b7 |
| pri_dev_type=1-0050F204-1 name='Test' config_methods=0x188 |
| dev_capab=0x21 group_capab=0x0 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_PROV_DISC_PBC_RESP P2P-PROV-DISC-PBC-RESP |
| |
| P2P_EVENT_PROV_DISC_PBC_RESP: The peer accepted our provision discovery |
| request to connect using PBC. The following parameters are included |
| after the event prefix: peer_address. P2P_CONNECT command can be used to |
| start GO Negotiation after this. |
| |
| \verbatim |
| P2P-PROV-DISC-PBC-RESP 02:40:61:c2:f3:b7 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_SERV_DISC_REQ P2P-SERV-DISC-REQ |
| |
| P2P-SERV-DISC-REQ: Indicate reception of a P2P service discovery |
| request. The following parameters are included after the event prefix: |
| frequency in MHz, source address, dialog token, Service Update |
| Indicator, Service Query TLV(s) as hexdump. |
| |
| \verbatim |
| P2P-SERV-DISC-REQ 2412 02:40:61:c2:f3:b7 0 0 02000001 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_SERV_DISC_RESP P2P-SERV-DISC-RESP |
| |
| P2P-SERV-DISC-RESP: Indicate reception of a P2P service discovery |
| response. The following parameters are included after the event prefix: |
| source address, Service Update Indicator, Service Response TLV(s) as |
| hexdump. |
| |
| \verbatim |
| P2P-SERV-DISC-RESP 02:40:61:c2:f3:b7 0 0300000101 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_INVITATION_RECEIVED P2P-INVITATION-RECEIVED |
| |
| P2P-INVITATION-RECEIVED: Indicate reception of a P2P Invitation |
| Request. For persistent groups, the parameter after the event prefix |
| indicates which network block includes the persistent group data. |
| |
| \verbatim |
| P2P-INVITATION-RECEIVED sa=02:40:61:c2:f3:b7 persistent=0 |
| \endverbatim |
| |
| \subsection ctrl_iface_event_P2P_EVENT_INVITATION_RESULT P2P-INVITATION-RESULT |
| |
| P2P-INVITATION-RESULT: Indicate result of a P2P invitation that was |
| requested with \ref ctrl_iface_P2P_INVITE. The parameter |
| status=<value> shows the status code returned by the peer (or -1 on |
| local failure or timeout). |
| |
| \verbatim |
| P2P-INVITATION-RESULT status=1 |
| \endverbatim |
| |
| */ |