meaning of log description

Unanswered Question
Dec 18th, 2006
User Badges:

What mean this messages , that i found in the log?


1)

Rogue AP : 00:c0:02:c7:f7:7a detected on Base Radio MAC : 00:0b:85:73:08:a0 Interface no:1(802.11b/g) with RSSI: -95 and SNR: 3


what are RSSI and SNR ?



2)

171 Mon Dec 18 14:28:37 2006 IDS Signature attack cleared. Signature Type: Standard, Name: EAPOL flood, Description: EAPOL Flood Attack, Track: per-signature, Detecting AP Name: 5 PIANO F1, Radio Type: 802.11b/g, Preced: 12, Channel: 6

172 Mon Dec 18 14:28:37 2006 IDS Signature attack cleared. Signature Type: Standard, Name: EAPOL flood, Description: EAPOL Flood Attack, Track: per-Mac, Detecting AP Name: 5 PIANO F1, Radio Type: 802.11b/g, Preced: 12, Channel: 6


After the last message the AP "5 PIANO F1" lose the connection.


thanks


fcostalunga


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.

1)RSSI is Received Signal Strength Indication, in laymen terms, how powerful the signal is.


SNR is Signal to Noise Ration..The SNR is the ratio between your desired signal and noise.


2) A device, possibly malicious, is sending a lot of authenication requests and its likly being disconnected as a result. Could be a false positive but you should look into it.



john.preves Mon, 12/18/2006 - 17:48
User Badges:
  • Silver, 250 points or more

that signal is so bad, you are probably picking it up out the window somewhere. I agree you should get some airmagnet or cognio and find it, but It probably isn't close...

Actions

This Discussion

 

 

Trending Topics: Other Wireless Mobility

client could not be authenticated
Network Analysis Module (NAM) Products
Cisco 6500 nam
reason 440 driver failure
Cisco password cracker
Cisco Wireless mode