cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1293
Views
0
Helpful
2
Replies

WSM Log: Packets with abnormal duration field from Client, DOS attack - Source and Destination MAC are native and same

igorosha88
Level 1
Level 1

Hello All,

We are facing problems with our 3 WiFi APs WAP200, they are constantly reboots, sometimes everyday.

I've tried to configure Intrusion Alarm on each of these devices and found in syslogs that one error message is repeating for a big period of time:

WSM Log: [Packets with abnormal duration field from Client, DOS attack] - Source MAC:[00:25:9C:76:BF:58] Destination MAC[00:25:9C:76:BF:58]

WSM Log: [Packets with abnormal duration field from Client, DOS attack] - Source MAC:[05:FE:7F:D7:46:80] Destination MAC[05:FE:7F:D7:46:80]

WSM Log: [Packets with abnormal duration field from Client, DOS attack] - Source MAC:[FC:FB:FB:02:3F:70] Destination MAC[FC:FB:FB:02:3F:70]

So it's strange that MACs are same and they are MAC of the own main SSID of that APs.

Now we have all of them configured with same SSID and running latest 2.0.6.0 firmware.

Please help to solve this problem, or maybe to find a cousing PC.

Thanks in advance.

2 Replies 2

igorosha88
Level 1
Level 1

can anyone help me? is this a normal situation?

could you fix the problem ?