Reference Guide (Supporting software release 5.5.0.0 and later) Owner manual

1150 Brocade Mobility RFS Controller CLI Reference Guide
53-1003098-01
21
event br-anomaly
[ad-hoc-violation|airjack|br-ssid-broadcast-in-beacon|asleap|
impersonation-attack|null-probe-response|transmitting-device-using-invalid-ma
c|
unencrypted-wired-leakage|wireless-bridge]
event client-anomaly
[dos-broadcast-deauth|fuzzing-all-zero-macs|fuzzing-invalid-frame-type|fuzzin
g-invalid-mgmt-frames|fuzzing-invalid-seq-num|identical-src-and-dest-addr|inv
alid-8021x-frames|netstumbler-generic|non-conforming-data|wellenreiter]
{filter-ageout <0-86400>}
br-anomaly Enables AP anomaly event tracking
An AP anomaly event refers to suspicious frames sent by neighboring APs. An administrator enables or
disables the filtering of each listed event and sets the thresholds for the generation of event notification
and filtering.
ad-hoc-violation Tracks ad-hoc network violations
airjack Tracks AirJack attacks
br-ssid-broadcast-in-beacon Tracks AP SSID broadcasts in beacon events
asleap Tracks ASLEAP attacks. These attacks break Lightweight Extensible Authentication Protocol (LEAP)
passwords
impersonation-attack Tracks impersonation attacks. These are also referred to as spoofing attacks, where the attacker
assumes the address of an authorized device.
null-probe-response Tracks null probe response attacks
transmitting-device-using-invali
d-mac
Tracks the transmitting device using an invalid MAC attacks
unencrypted-wired-leakage Tracks unencrypted wired leakage
wireless-bridge Tracks wireless bridge (WDS) frames
client-anomaly Enables client anomaly event tracking
These are suspicious events performed by wireless clients compromising the security of the network. An
administrator can enable or disable filtering of each listed event and set the thresholds required for the
generation of the event notification and filtering action applied.
dos-broadcast-deauth Tracks DoS broadcast deauthentication events
fuzzing-all-zero-macs Tracks Fuzzing: All zero MAC addresses observed
fuzzing-invalid-frame-type Tracks Fuzzing: Invalid frame type detected
fuzzing-invalid-mgmt-frames Tracks Fuzzing: Invalid management frame detected
fuzzing-invalid-seq-num Tracks Fuzzing: Invalid sequence number detected
identical-src-and-dest-addr Tracks identical source and destination addresses detection
invalid-8021x-frames Tracks Fuzzing: Invalid 802.1x frames detected
netstumbler-generic Tracks Netstumbler (v3.2.0, 3.2.3, 3.3.0) events
non-conforming-data Tracks non conforming data packets