Thank you XOIIO,
I performed a tcpdump on my OpenWRT router and here is what I got when my laptop wakes up:
13:57:00.519756 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 32, options (RA))
0.0.0.0 > all-systems.mcast.net: igmp query v2
13:59:05.959755 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 32, options (RA))
0.0.0.0 > all-systems.mcast.net: igmp query v2
14:01:11.399757 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 32, options (RA))
0.0.0.0 > all-systems.mcast.net: igmp query v2
14:03:16.839756 IP (tos 0xc0, ttl 1, id 0, offset 0, flags [DF], proto IGMP (2), length 32, options (RA))
0.0.0.0 > all-systems.mcast.net: igmp query v2
14:03:46.307340 EAPOL key (3) v2, len 127
14:03:46.808198 EAPOL key (3) v2, len 127
14:03:47.809544 EAPOL key (3) v2, len 127
14:03:48.315020 5c:c5:d4:3b:1b:55 (oui Unknown) > Broadcast Null Unnumbered, xid, Flags [Response], length 6: 01 00
14:03:48.318382 EAPOL key (3) v2, len 95
14:03:48.997104 5c:c5:d4:3b:1b:55 (oui Unknown) > Broadcast Null Unnumbered, xid, Flags [Response], length 6: 01 00
14:03:48.999671 EAPOL key (3) v2, len 95
14:03:49.088878 EAPOL key (3) v1, len 119
14:03:49.090515 EAPOL key (3) v2, len 151
14:03:49.091985 EAPOL key (3) v1, len 95
14:03:49.141487 IP6 (hlim 1, next-header UDP (17) payload length: 92) fe80::8d54:795b:41c5:cff8.dhcpv6-client > ff02::1:2.dhcpv6-server: [udp sum ok] dhcp6 solicit (xid=1e9f2d (elapsed-time 0) (client-ID hwaddr/time type 1 time 475534867 08626653ad4c) (IA_NA IAID:73188820 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request DNS-search-list DNS-server vendor-specific-info Client-FQDN))
14:03:49.141544 IP6 (hlim 1, next-header UDP (17) payload length: 92) fe80::8d54:795b:41c5:cff8.dhcpv6-client > ff02::1:2.dhcpv6-server: [udp sum ok] dhcp6 solicit (xid=1e9f2d (elapsed-time 0) (client-ID hwaddr/time type 1 time 475534867 08626653ad4c) (IA_NA IAID:73188820 T1:0 T2:0) (Client-FQDN) (vendor-class) (option-request DNS-search-list DNS-server vendor-specific-info Client-FQDN))
The tcpdump correspond with the router logs :
Mar 31 14:03:48 OpenWrt daemon.info hostapd: wlan1: STA 5c:c5:d4:3b:1b:40 IEEE 802.11: authenticated
Mar 31 14:03:48 OpenWrt daemon.info hostapd: wlan1: STA 5c:c5:d4:3b:1b:55 IEEE 802.11: associated (aid 1)
Mar 31 14:03:48 OpenWrt daemon.info hostapd: wlan1: STA 5c:c5:d4:3b:1b:55 IEEE 802.11: authenticated
Mar 31 14:03:48 OpenWrt daemon.info hostapd: wlan1: STA 5c:c5:d4:3b:1b:55 IEEE 802.11: associated (aid 1)
Mar 31 14:03:49 OpenWrt daemon.info hostapd: wlan1: STA 5c:c5:d4:3b:1b:55 WPA: pairwise key handshake completed (RSN)
Mar 31 14:03:52 OpenWrt daemon.info dnsmasq-dhcp[1208]: DHCPREQUEST(br-lan) 192.168.237.226 08:62:66:53:ad:4c
Mar 31 14:03:52 OpenWrt daemon.info dnsmasq-dhcp[1208]: DHCPACK(br-lan) 192.168.237.226 08:62:66:53:ad:4c ASUS
Here are also the logs from Intel Pro Set :
387,Task Tray,03/31/2015 15:54:36,Information,General,krys,End scan event from the service.
388,S24EvMon,03/31/2015 16:03:44,Error,TCP/IP,Système,Did not receive an IP address from DHCP server
389,Task Tray,03/31/2015 16:03:44,Information,Adapter,krys,DHCP Failure event from the adapter.
390,S24EvMon,03/31/2015 16:03:44,Information,Driver,Système,ATC 64:70:02:ba:03:ec WIFIAP 48 RSSI=-53
391,S24EvMon,03/31/2015 16:03:44,Success,Driver,Système,RxAuthSuccess 64:70:02:ba:03:ec 48
392,S24EvMon,03/31/2015 16:03:44,Success,Driver,Système,RxAssocResp 64:70:02:ba:03:ec 48 -53
393,Profile Manager API,03/31/2015 16:03:44,Warning,Profile,krys,The given profile already exists in the database.
394,ZCfgSvc,03/31/2015 16:03:44,Information,Security,Système,Link down Wireless Profile: WIFIAP
395,S24EvMon,03/31/2015 16:03:44,Information,TCP/IP,Système,VoIP: Got link down - deleting flows .
396,S24EvMon,03/31/2015 16:03:44,Information,General,Système,Start Wireless Connection
397,S24EvMon,03/31/2015 16:03:45,Information,Driver,Système,ATC 64:70:02:ba:03:ec WIFIAP 48 RSSI=-53
398,S24EvMon,03/31/2015 16:03:45,Success,Driver,Système,RxAuthSuccess 64:70:02:ba:03:ec 48
399,S24EvMon,03/31/2015 16:03:45,Success,Driver,Système,RxAssocResp 64:70:02:ba:03:ec 48 -53
400,ZCfgSvc,03/31/2015 16:03:45,Success,Security,Système,Link up Wireless Profile: WIFIAP
The last ping was almost 1 minute before, so probably not related to the wakeup
And here are the Sytem Event logs :
Information 31-03-15 16:03:45 Power-Troubleshooter 1 None "The system has returned from a low power state. Sleep Time: 2015-03-31T13:54:48.305633600Z Wake Time: 2015-03-31T14:03:43.315769900Z Wake Source: Unknown"
Information 31-03-15 16:03:43 Kernel-Power 131 (33) "Firmware S3 times. ResumeCount: 20, FullResume: 977, AverageResume: 977"
Information 31-03-15 16:03:43 BTHUSB 18 None "Windows cannot store Bluetooth authentication codes (link keys) on the local adapter. Bluetooth keyboards might not work in the system BIOS during startup."
Information 31-03-15 16:03:42 MEIx64 2 None "Intel(R) Management Engine Interface driver has started successfully."
Information 31-03-15 16:03:42 Kernel-General 1 None "The system time has changed to 2015-03-31T14:03:42.500000000Z from 2015-03-31T13:54:50.574538000Z. Change Reason: System time synchronized with the hardware clock."
Information 31-03-15 15:54:49 Kernel-Power 42 (64) "The system is entering sleep. Reason: Application API"
note : there might be a 4-6 seconds lag between Windows and the router.