Displaying Rogue Detection Counters - Nortel 2360 Configuration Manual

Displaying rogue detection counters

To display rogue detection statistics counters, use the following command:
show rfdetect counters
The command shows counters for rogue activity detected by the WSS on which you enter the command.
WSS# show rfdetect counters
Type
-------------------------------------------------- ------------ ------------
Rogue access points
Interfering access points
Rogue 802.11 clients
Interfering 802.11 clients
802.11 adhoc clients
Unknown 802.11 clients
Interfering 802.11 clients seen on wired network
802.11 probe request flood
802.11 authentication flood
802.11 null data flood
802.11 mgmt type 6 flood
802.11 mgmt type 7 flood
802.11 mgmt type d flood
802.11 mgmt type e flood
802.11 mgmt type f flood
802.11 association flood
802.11 reassociation flood
802.11 disassociation flood
Weak wep initialization vectors
Spoofed access point mac-address attacks
Spoofed client mac-address attacks
Ssid masquerade attacks
Spoofed deauthentication attacks
Spoofed disassociation attacks
Null probe responses
Broadcast deauthentications
FakeAP ssid attacks
FakeAP bssid attacks
Netstumbler clients
Wellenreiter clients
Active scans
Wireless bridge frames
Adhoc client frames
Access points present in attack-list
Access points not present in ssid-list
Access points not present in vendor-list
Clients not present in vendor-list
Clients added to automatic black-list
Note.
WSS Software generates log messages for most of these statistics. See
DoS alerts" (page
Current Total
0
139
0
4 347
0
20
0
0
0
0
0
0
0
0
0
0
0
0
0
1
0
0
626 11380
0
0
0
0 0
0 0
1796 4383
196
8
0
0
0
0
0
638).
Nortel WLAN—Security Switch 2300 Series Configuration Guide
Rogue detection and counter measures 645
0
1116
0
1
965
0 0
0
0
0
0
0
0
0
0
0
0
0
0
0 0
0
12
0
0
0
0
0
196
0
0
0
0
0
0
"IDS and