Wireless - Wireshark Capture

[Craig Le-Butt]

Hi

Wonder if someone has seen this before.

Syslog   LOCAL7.ERR: 20598108: AP:0019.3077.049c: *Jun  7 12:39:38.305: %CAPWAP-3-ERRORLOG: Invalid AC Message Type 131076.

We was monitoring a port and came up with this.

The APs it refers to are not on this switch or in this cab room.  There are around 320 APs for this site, but only receivng this for 2 APs.  This is currently a flat network. If this was a broadcast surley we would see all 320 APs repeating the same message.

cheers

Craig

[dancampb]

By default the AP's broadcast the syslog messages which is what this looks to be.  You might want to set the unicast address of your syslog server for the AP's so they are not broadcasting (config ap syslog host global x.x.x.x)