Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

meaning of log description

What mean this messages , that i found in the log?

1)

Rogue AP : 00:c0:02:c7:f7:7a detected on Base Radio MAC : 00:0b:85:73:08:a0 Interface no:1(802.11b/g) with RSSI: -95 and SNR: 3

what are RSSI and SNR ?

2)

171 Mon Dec 18 14:28:37 2006 IDS Signature attack cleared. Signature Type: Standard, Name: EAPOL flood, Description: EAPOL Flood Attack, Track: per-signature, Detecting AP Name: 5 PIANO F1, Radio Type: 802.11b/g, Preced: 12, Channel: 6

172 Mon Dec 18 14:28:37 2006 IDS Signature attack cleared. Signature Type: Standard, Name: EAPOL flood, Description: EAPOL Flood Attack, Track: per-Mac, Detecting AP Name: 5 PIANO F1, Radio Type: 802.11b/g, Preced: 12, Channel: 6

After the last message the AP "5 PIANO F1" lose the connection.

thanks

fcostalunga

2 REPLIES

Re: meaning of log description

1)RSSI is Received Signal Strength Indication, in laymen terms, how powerful the signal is.

SNR is Signal to Noise Ration..The SNR is the ratio between your desired signal and noise.

2) A device, possibly malicious, is sending a lot of authenication requests and its likly being disconnected as a result. Could be a false positive but you should look into it.

Bronze

Re: meaning of log description

that signal is so bad, you are probably picking it up out the window somewhere. I agree you should get some airmagnet or cognio and find it, but It probably isn't close...

620
Views
0
Helpful
2
Replies
CreatePlease to create content