无线安全问题

[孙先生]

今天客户反馈，探针探测到一个安全事件告警。如图一所示，这个终端地址经过查询是无线信号连接，通过lacp认证，指向无线控制器，然后控制器疑似一直向 3132372e302e302e31.cisio.com这个域名发送信息，经过解析，这个域名对应地址是209.15.13.134--位置在加拿大多伦多，很奇怪，是我的控制器设置哪里出现问题了吗？还是我的版本问题，版本如图2所示，

日志一直提示

*broffu_SocketReceive: May 12 15:37:01.325: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=40 Current WQE = 4504768

*broffu_SocketReceive: May 12 15:36:51.321: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=38 Current WQE = 4504761

*broffu_SocketReceive: May 12 15:36:41.317: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=38 Current WQE = 4504756

*broffu_SocketReceive: May 12 15:36:31.313: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=40 Current WQE = 4504753

*broffu_SocketReceive: May 12 15:36:21.309: %BROFFU-0-DP_PACKET_WQE_DIFF: broffu_fp_dapi_cmd.c:6348 Warning: DP Packet pool and WQE pool is not normal. DP0 Current PacketBuffer=40 Current WQE = 4504747

[marce1000]

 - - 这也可能与错误有关： https://bst.cloudapps.cisco.com/bugsearch/bug/CSCvh79685

 M.

[Rich R]

you seem to be mentioning 2 completely separate problems.

1. Some sort of security problem - you need to explain that better but sounds like nothing to do with WLC

2. Error logs you noticed - refer to bug link @marce1000 provided.  You did not state what model of WLC or software version you're working with so hard to give any more info than that.  If you're on an affected version of code then upgrade to fixed code.