Nortel 2300 Series Configuration Manual page 560

560 Rogue Detection and Countermeasures
Table 34: IDS and DoS Log Messages (continued)
Message Type
Fake AP SSID (when
source MAC address is
known)
Fake AP SSID (when
source MAC address is
not known)
Spoofed SSID
Wireless bridge
detected
Netstumbler detected
Wellenreiter detected
Ad-hoc client frame
detected
Spoofed AP
Disallowed SSID
detected
AP from disallowed
vendor detected
Client from disallowed
vendor detected
Interfering client seen
on wired network
320657-A
Example Log Message
FakeAP SSID attack detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
FakeAP BSSID attack detected.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is masquerading our ssid used by
aa:bb:cc:dd:ee:fd.
Detected by listener aa:bb:cc:dd:ee:fc(port 2, radio 1), channel 11 with
RSSI -53.
Wireless bridge detected with address aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Netstumbler detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Wellenreiter detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
Adhoc client frame detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is being spoofed. Received
fingerprint 1122343 does not match our fingerprint 123344.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
RSSI -53.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of ssid-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
RSSI -53.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of vendor-list.
Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with
RSSI -53.
Client Mac aa:bb:cc:dd:ee:ff is not part of vendor-list. Detected by
listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.
Client Mac aa:bb:cc:dd:ee:ff is seen on the wired network by WSS
10.1.1.1 on port 3 vlan 2 tag 1. Detected by listener
aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.