642 Rogue detection and counter measuresNN47250-500 (320657-F Version 02.01)Fake AP SSID (whensource MAC address isknown)FakeAP SSID attack detected from aa:bb:cc:dd:ee:ff.Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.Fake AP SSID (whensource MAC address isnot known)FakeAP BSSID attack detected.Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.Spoofed SSID AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is masquerading our ssid used byaa:bb:cc:dd:ee:fd.Detected by listener aa:bb:cc:dd:ee:fc(port 2, radio 1), channel 11 withRSSI -53.Wireless bridgedetected Wireless bridge detected with address aa:bb:cc:dd:ee:ff.Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.Netstumbler detected Netstumbler detected from aa:bb:cc:dd:ee:ff.Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.Wellenreiter detected Wellenreiter detected from aa:bb:cc:dd:ee:ff.Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.Ad-hoc client framedetectedAdhoc client frame detected from aa:bb:cc:dd:ee:ff.Seen by AP on port 2, radio 1 on channel 11 with RSSI -53 SSID myssid.Spoofed AP AP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is being spoofed. Receivedfingerprint 1122343 does not match our fingerprint 123344.Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 withRSSI -53.Disallowed SSIDdetectedAP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of ssid-list.Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 withRSSI -53.AP from disallowedvendor detectedAP Mac aa:bb:cc:dd:ee:ff(ssid myssid) is not part of vendor-list.Detected by listener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 withRSSI -53.Client from disallowedvendor detectedClient Mac aa:bb:cc:dd:ee:ff is not part of vendor-list. Detected bylistener aa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.Interfering client seenon wired networkClient Mac aa:bb:cc:dd:ee:ff is seen on the wired network by WSS10.1.1.1 on port 3 vlan 2 tag 1. Detected by listeneraa:bb:cc:dd:ee:fd(port 2, radio 1), channel 11 with RSSI -53.Table 2.IDS and DoS log messages (continued)Message Type Example Log Message
