Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Silver

WCS 4 / WLC 4 False Alarms(?): "NetStumbler Generic Signature Attack"

We are experiencing a periodic, recurring IDS error: "NetStumbler Generic Signature Attack". This appears to be another false positive from the IDS.

(See CSCse70641 for related false alarm information)

The reason that we believed this to be a false alarm because the MAC address from which the attack is said to be sourced was MAC address of the customer's laptop NIC which was not running NetStumbler.

Has anyone else seen this?

For reference, the WCS/WLC configuration is as follows:

=======================================================

WCS Version 4.0.81.0 Base+Location

Windows 2003 with WCS running as a service.

Multi-processor Xeon, 8 GB of RAM.

Two 4404 WLC controllers v4.0.179.8

1 REPLY
Bronze

Re: WCS 4 / WLC 4 False Alarms(?): "NetStumbler Generic Signatur

This can also happen if there is a problem in the signature files.

319
Views
0
Helpful
1
Replies
CreatePlease to create content