%DOT11-4-CKIP_REPLAY: CKIP SEQ replay was detected on a packet

[rlortiz]

I have a site that generating the following error message:

%DOT11-4-CKIP_REPLAY: CKIP SEQ replay was detected on a packet (SEQ 0x4035A) received from 0040.96a5.7359.

The error message definition is the following:

CKIP SEQ replay was detected on a frame. A replay of the CKIP SEQ in a received packet almost indicates an active attack."

Recommended Action None.

Is this really an attack or not? Should I do some type of debugging to figure this out or is it really just an informational error message?

Any help would be appreciated.

Rich

[gpulos]

how often is this message generated?

the following link has information on this message. not much more than the switch provided.

their recommended action is none.

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_configuration_guide_chapter09186a0080606ca0.html#wp1009096

(down the page a bit for the DOT11-4-CKIP message)