3Com WX4400 3CRWX440095A - Manual (Page 589)

IDS and DoS Alerts 589
Spoofed
disassociation frames Disassociation frame from AP aa:bb:cc:dd:ee:ff is being
spoofed.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Null probe responses AP aa:bb:cc:dd:ee:ff is sending null probe responses.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Broadcast
deauthentications AP aa:bb:cc:dd:ee:ff is sending broadcast
deauthentications.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Fake AP SSID (when
source MAC address
is known) FakeAP SSID attack detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Fake AP SSID (when
source MAC address
is not known) FakeAP BSSID attack detected.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Spoofed SSID AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is masquerading our
ssid used by aa:bb:cc:dd:ee:fd.
Detected by listener aa:bb:cc:dd:ee:fc(port 2, radio 1),
channel 11 with RSSI -53.
Wireless bridge
detected Wireless bridge detected with address aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Netstumbler detected Netstumbler detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Wellenreiter detected Wellenreiter detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Ad-hoc client frame
detected Adhoc client frame detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Table 49 IDS and DoS Log Messages (continued)
Message Type Example Log Message