cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
5083
Views
0
Helpful
3
Replies

IDS Signature attack detected.

garyleggat
Level 1
Level 1

A client was having problems connecting to this access point at the time this error was received would this mean something or someone is trying to lockup a client’s WIFI Adaptor ?

 

IDS Signature attack detected. Signature Type: Standard, Name: NULL probe resp 1, Description: NULL Probe Response - Zero length SSID element, Track: per-Mac, Detecting AP Name: XXXXXXXX, Radio Type: 802.11a, Preced: 2, Hits: 1, Channel: 161, srcMac: XXXXXXXXXXXXX

 

NULL probe response signatures—During a NULL probe response attack, a hacker sends a NULL probe response to a wireless client adapter. As a result, the client adapter locks up. When a NULL probe response signature is used to detect such an attack, the access point identifies the wireless client and alerts the controller. The NULL probe response signatures are as follows:

3 Replies 3

patoberli
VIP Alumni
VIP Alumni
Very probably the client driver for the wi-fi adapter is way out of date. Could also be an AP bug, which software version and ap type are you using?

The WLC is at 8.3 also the AP is a AP Models AIR-CAP1702I-A-K9 Version 8.3.143.0


Like what was mentioned, check the driver version on the device. If you have other devices connected fine, I don’t think it’s a wireless issue but points to the device.  

-Scott
*** Please rate helpful posts ***
Review Cisco Networking products for a $25 gift card