We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

brwyatt — Tue, 30 Oct 2018 22:34:53 GMT

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

dsouri — Wed, 31 Oct 2018 00:57:54 GMT

Hi Brian,

Can you show me more about the client: 241b:4742:0019 from the logs?

It would help me understand what happened before/after that entry,

David Souri

HiveCommunity Moderator

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

brwyatt — Wed, 31 Oct 2018 01:02:22 GMT

Here is the full log.

2018-10-30 14:00:51 info ah_cli: admin:
2018-10-30 14:00:50 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:0024 AA
d609:6da6:0019 dropped
2018-10-30 14:00:49 info l7d: Failover for uploading
9C5D12702BC00015.lpr succeed
2018-10-30 14:00:49 notice capwap: curl -F
"filename=@/tmp/l7_report/9C5D12702BC00015.lpr" -m 900 -k -f --digest
-u scpuser:********************************
"https://10.20.1.250/hm/upload?FileType=6" "scpuser" successfully
http to server
2018-10-30 14:00:49 info capwap: in ah_http_capture_callback
2018-10-30 14:00:49 info ah_cli: admin:
9C5D12702BC00015.lpr "https://10.20.1.250/hm/upload?FileType=6" admin
scpuser password *** digest>
2018-10-30 14:00:48 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:cc20 AA
e80e:4409:0019 dropped
2018-10-30 14:00:46 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:80c5 AA
f262:0f8f:0019 dropped
2018-10-30 14:00:46 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:c83c AA
8583:2051:0019 dropped
2018-10-30 14:00:45 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:6894 AA
239b:eeeb:0019 dropped
2018-10-30 14:00:43 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
da93:0cae:0019 dropped
2018-10-30 14:00:42 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:e006 AA
e619:93d8:0019 dropped
2018-10-30 14:00:41 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:e006 AA
e619:93d8:0019 dropped
2018-10-30 14:00:41 info ah_cli: admin:
collection-period 3600 report-period 3600>
2018-10-30 14:00:39 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:fcd8 AA
4870:6180:0019 dropped
2018-10-30 14:00:35 info amrp2: set proxy route: d461:da99:5699 ->
0019:7749:4a00 ifp N/A upid 1 flag 0x1402 monitor(0/0) pkt/sec ok
2018-10-30 14:00:35 info kernel: [wifi]: wifi0: purging node
d4:61:da:99:56:99 (answer=no) from the SP table
2018-10-30 14:00:35 info kernel: [mesh]: set proxy : d461:da99:5699
0019:7749:4a00 n/a flag 0x1402
2018-10-30 14:00:34 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
da93:0cae:0019 dropped
2018-10-30 14:00:33 info kernel: [wifi]: wifi1: suppress request
from c4:d9:87:db:f4:4d, reason weak-snr
2018-10-30 14:00:33 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:241b AA
7aa5:c337:0019 dropped
2018-10-30 14:00:31 info kernel: [mesh]: set proxy : d461:da99:5699
0019:7749:4a00 n/a flag 0x1402
2018-10-30 14:00:31 info amrp2: set proxy route: d461:da99:5699 ->
0019:7749:4a00 ifp N/A upid 1 flag 0x1402 monitor(0/0) pkt/sec ok
2018-10-30 14:00:31 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:cc61 AA
e5d9:3cce:0019 dropped
2018-10-30 14:00:28 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
da9f:cd90:0019 dropped
2018-10-30 14:00:28 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:241b AA
7a9b:d848:0019 dropped
2018-10-30 14:00:27 info kernel: [wifi]: wifi1: suppress request
from d4:61:da:8f:b9:51, reason weak-snr
2018-10-30 14:00:27 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
da8f:b951:0019 dropped
2018-10-30 14:00:26 info kernel: [wifi]: wifi1: suppress request
from 2c:0e:3d:b7:44:2a, reason weak-snr
2018-10-30 14:00:26 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:8c85 AA
90aa:22ac:0019 dropped
2018-10-30 14:00:25 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
da9d:8294:0019 dropped
2018-10-30 14:00:24 info kernel: [wifi]: wifi1: suppress request
from d4:61:da:a3:4f:1c, reason weak-snr
2018-10-30 14:00:23 info kernel: [wifi]: wifi1: suppress request
from c8:3c:85:83:20:51, reason load-balance-sta-num
2018-10-30 14:00:22 info ah_auth: update RT sta:
MAC=c017:4dad:5b3d, IPv6 address number =0, username= on wifi1.1
2018-10-30 14:00:22 info capwap: CAPWAP: receive capwap query
interface map info response event!, length:140
2018-10-30 14:00:22 info capwap: receive event capwap query
interface map info response: eventid = 172: length = 140
2018-10-30 14:00:21 info capwap: receive event statistics recv
event to dcd: eventid = 125: length = 48
2018-10-30 14:00:21 info capwap: receive event statistics recv
event to auth: eventid = 129: length = 48
2018-10-30 14:00:21 info capwap: receive event statistics recv
event to amrp: eventid = 127: length = 16
2018-10-30 14:00:21 info capwap: receive event statistics recv
event to amrp: eventid = 127: length = 136
2018-10-30 14:00:21 info last message repeated 2 times
2018-10-30 14:00:21 info capwap: receive event statistics recv
event to amrp: eventid = 127: length = 16
2018-10-30 14:00:21 info amrp2: amrp send capwap-statistic-reply 0 entries
2018-10-30 14:00:21 info amrp2: amrp receive
capwap-statistic-request Mod_id (4) No.(78) ifindex 5
2018-10-30 14:00:21 info amrp2: amrp send capwap-statistic-reply 6 entries
2018-10-30 14:00:21 info amrp2: amrp receive
capwap-statistic-request Mod_id (4) No.(78) ifindex 3
2018-10-30 14:00:21 info amrp2: amrp send capwap-statistic-reply 0 entries
2018-10-30 14:00:21 info amrp2: amrp receive
capwap-statistic-request Mod_id (4) No.(78) ifindex 13
2018-10-30 14:00:21 info amrp2: amrp send capwap-statistic-reply 0 entries
2018-10-30 14:00:21 info amrp2: amrp receive
capwap-statistic-request Mod_id (4) No.(78) ifindex 11
2018-10-30 14:00:21 info amrp2: amrp send capwap-statistic-reply 0 entries
2018-10-30 14:00:21 info amrp2: amrp receive
capwap-statistic-request Mod_id (4) No.(78) ifindex 12
2018-10-30 14:00:21 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
da9e:08ee:0019 dropped
2018-10-30 14:00:20 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
da9a:85b9:0019 dropped
2018-10-30 14:00:19 info amrp2: set proxy route: d461:da9a:85b9 ->
0019:7759:87c0 ifp N/A upid 1 flag 0x1402 monitor(0/0) pkt/sec ok
2018-10-30 14:00:19 info kernel: [wifi]: wifi0: purging node
d4:61:da:9a:85:b9 (answer=no) from the SP table
2018-10-30 14:00:19 info kernel: [mesh]: set proxy : d461:da9a:85b9
0019:7759:87c0 n/a flag 0x1402
2018-10-30 14:00:19 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f018 AA
9831:31af:0019 dropped
2018-10-30 14:00:18 info kernel: [wifi]: wifi1: suppress request
from d4:61:da:93:0c:ae, reason weak-snr
2018-10-30 14:00:17 info kernel: [wifi]: wifi1: suppress request
from d4:61:da:97:cc:ae, reason load-balance-sta-num
2018-10-30 14:00:17 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:d461 AA
9d4a:7354:0019 dropped
2018-10-30 14:00:17 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:2c0e AA
3db7:442a:0019 dropped
2018-10-30 14:00:17 info kernel: [wifi]: wifi1: suppress request
from c4:d9:87:dc:4b:87, reason load-balance-sta-num
2018-10-30 14:00:16 info kernel: [wifi]: wifi1: suppress request
from d4:61:da:9a:85:b9, reason weak-snr
2018-10-30 14:00:15 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:7c5c AA
f89f:547f:0019 dropped
2018-10-30 14:00:14 warn ah_auth: ah_auth_cookie_parse: magic[0]
mismatch(8964), roaming cache SPA 0000:0001:d461 AA da9a:85b9:0019
dropped
2018-10-30 14:00:14 info kernel: [mesh]: set proxy : d461:da9a:85b9
0019:7759:87c0 n/a flag 0x1402
2018-10-30 14:00:14 info amrp2: set proxy route: d461:da9a:85b9 ->
0019:7759:87c0 ifp N/A upid 1 flag 0x1402 monitor(0/0) pkt/sec ok
2018-10-30 14:00:14 info kernel: [wifi]: wifi1: suppress request
from 24:1b:7a:a5:c3:37, reason weak-snr
2018-10-30 14:00:12 info kernel: [wifi]: wifi1: suppress request
from 0c:cb:85:8b:92:d6, reason weak-snr
2018-10-30 14:00:12 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:e006 AA
e619:964e:0019 dropped
2018-10-30 14:00:12 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:241b AA
7aa5:c337:0019 dropped
2018-10-30 14:00:12 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:b863 AA
4db3:91bd:0019 dropped
2018-10-30 14:00:12 info kernel: [wifi]: wifi1: suppress request
from b8:63:4d:b3:f0:73, reason load-balance-sta-num
2018-10-30 14:00:11 info kernel: [wifi]: wifi1: suppress request
from d4:61:da:9f:5d:8a, reason load-balance-sta-num
2018-10-30 14:00:10 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:701a AA
0468:7eac:0019 dropped
2018-10-30 14:00:09 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:b0ca AA
6813:0322:0019 dropped
2018-10-30 14:00:09 warn ah_auth: ah_auth_cookie_parse:
magic[21881] mismatch(8964), roaming cache SPA 0000:0001:241b AA
7aac:2199:0019 dropped
2018-10-30 14:00:08 info kernel: [wifi]: wifi1: suppress request
from d4:61:da:99:56:99, reason load-balance-sta-num
2018-10-30 14:00:06 info kernel: [mesh]: set proxy : d461:da99:5699
0019:774a:d1c0 n/a flag 0x1402
2018-10-30 14:00:06 info amrp2: set proxy route: d461:da99:5699 ->
0019:774a:d1c0 ifp N/A upid 1 flag 0x1402 monitor(

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

dsouri — Wed, 31 Oct 2018 01:42:09 GMT

Hello,

It looks like AUTH Debug Outputs, but is there any weird behavior happening in correlation to the logs?

Did you enable auth debugs previously?

David Souri

HiveCommunity Moderator

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

brwyatt — Wed, 31 Oct 2018 01:50:28 GMT

Trouble with our 802.1x clients dropping connection. This site is a 1:1 iPad. We have change the radio profile to the k-12 high density that Aerohive recommends.

topic Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped in Aerohive Migrated Content

We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped

Re: We are having a lot of these warnings in our aerohive logs on some of our APs. Can someone tell what this is. 11:27:55 warn ah_auth: ah_auth_cookie_parse: magic[21881] mismatch(8964), roaming cache SPA 0000:0001:f40f AA 241b:4742:0019 dropped