beautypg.com

3Com WX4400 3CRWX440095A User Manual

Page 588

background image

588

C

HAPTER

26: R

OGUE

D

ETECTION

AND

C

OUNTERMEASURES

Management frame 6
flood

Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame 6
message flood.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Management frame 7
flood

Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame 7
message flood.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Management frame D
flood

Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame D
message flood.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Management frame E
flood

Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame E
message flood.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Management frame F
flood

Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame F
message flood.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Associate request
flood

Client aa:bb:cc:dd:ee:ff is sending associate request flood
on port 2

Reassociate request
flood

Client aa:bb:cc:dd:ee:ff is sending re-associate request
flood on port 2

Disassociate request
flood

Client aa:bb:cc:dd:ee:ff is sending disassociate request
flood on port 2

Weak WEP
initialization vector
(IV)

Client aa:bb:cc:dd:ee:ff is using weak wep initialization
vector.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Decrypt errors

Client aa:bb:cc:dd:ee:ff is sending packets with decrypt
errors.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Spoofed
deauthentication
frames

Deauthentication frame from AP aa:bb:cc:dd:ee:ff is being
spoofed.

Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.

Table 49 IDS and DoS Log Messages (continued)

Message Type

Example Log Message