3Com WX1200 3CRWX120695A Configuration Manual page 589

Table 49 IDS and DoS Log Messages (continued)
Message Type
Spoofed
disassociation frames
Null probe responses
Broadcast
deauthentications
Fake AP SSID (when
source MAC address
is known)
Fake AP SSID (when
source MAC address
is not known)
Spoofed SSID
Wireless bridge
detected
Netstumbler detected Netstumbler detected from aa:bb:cc:dd:ee:ff.
Wellenreiter detected
Ad-hoc client frame
detected
Example Log Message
Disassociation frame from AP aa:bb:cc:dd:ee:ff is being
spoofed.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
AP aa:bb:cc:dd:ee:ff is sending null probe responses.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
AP aa:bb:cc:dd:ee:ff is sending broadcast
deauthentications.
Seen by AP on port 2, radio 1 on channel 11 with RSSI
-53.
FakeAP SSID attack detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
FakeAP BSSID attack detected.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is masquerading our
ssid used by aa:bb:cc:dd:ee:fd.
Detected by listener aa:bb:cc:dd:ee:fc(port 2, radio 1),
channel 11 with RSSI -53.
Wireless bridge detected with address aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Wellenreiter detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
Adhoc client frame detected from aa:bb:cc:dd:ee:ff.
Seen by AP on port 2, radio 1 on channel 11 with RSSI -53
SSID myssid.
IDS and DoS Alerts 589