3Com WX1200 3CRWX120695A Configuration Manual page 588

588 C 26: R
HAPTER OGUE
D C
ETECTION AND OUNTERMEASURES
Table 49 IDS and DoS Log Messages (continued)
Message Type
Management frame 6
flood
Management frame 7
flood
Management frame D
flood
Management frame E
flood
Management frame F
flood
Associate request
flood
Reassociate request
flood
Disassociate request
flood
Weak WEP
initialization vector
(IV)
Decrypt errors
Spoofed
deauthentication
frames
Example Log Message
Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame 6
message flood.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame 7
message flood.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame D
message flood.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame E
message flood.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Client aa:bb:cc:dd:ee:ff is sending rsvd mgmt frame F
message flood.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Client aa:bb:cc:dd:ee:ff is sending associate request flood
on port 2
Client aa:bb:cc:dd:ee:ff is sending re-associate request
flood on port 2
Client aa:bb:cc:dd:ee:ff is sending disassociate request
flood on port 2
Client aa:bb:cc:dd:ee:ff is using weak wep initialization
vector.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Client aa:bb:cc:dd:ee:ff is sending packets with decrypt
errors.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
Deauthentication frame from AP aa:bb:cc:dd:ee:ff is being
spoofed.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.