3Com WX2200 3CRWX220095A Switch User Manual


 
IDS and DoS Alerts 589
Spoofed
disassociation frames
Disassociation frame from AP aa:bb:cc:dd:ee:ff is being
spoofed.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Null probe responses AP aa:bb:cc:dd:ee:ff is sending null probe responses.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Broadcast
deauthentications
AP aa:bb:cc:dd:ee:ff is sending broadcast
deauthentications.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Fake AP SSID (when
source MAC address
is known)
FakeAP SSID attack detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Fake AP SSID (when
source MAC address
is not known)
FakeAP BSSID attack detected.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Spoofed SSID AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is masquerading our
ssid used by aa:bb:cc:dd:ee:fd.
Detected by listener aa:bb:cc:dd:ee:fc(port 2, radio 1),
channel 11 with RSSI -53.
Wireless bridge
detected
Wireless bridge detected with address aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Netstumbler detected Netstumbler detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Wellenreiter detected Wellenreiter detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Ad-hoc client frame
detected
Adhoc client frame detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Table 49 IDS and DoS Log Messages (continued)
Message Type Example Log Message