Hub/Switch Reference Guide

534 RF Detection Commands
NN47250-100 (Version 02.51)
802.11 probe request flood 0 0
802.11 authentication flood 0 0
802.11 null data flood 0 0
802.11 mgmt type 6 flood 0 0
802.11 mgmt type 7 flood 0 0
802.11 mgmt type d flood 0 0
802.11 mgmt type e flood 0 0
802.11 mgmt type f flood 0 0
802.11 association flood 0 0
802.11 reassociation flood 0 0
802.11 disassociation flood 0 0
Weak wep initialization vectors 0 0
Spoofed access point mac-address attacks 0 0
Spoofed client mac-address attacks 0 0
Ssid masquerade attacks 1 12
Spoofed deauthentication attacks 0 0
Spoofed disassociation attacks 0 0
Null probe responses 626 11380
Broadcast deauthentications 0 0
FakeAP ssid attacks 0 0
FakeAP bssid attacks 0 0
Netstumbler clients 0 0
Wellenreiter clients 0 0
Active scans 1796 4383
Wireless bridge frames 196 196
Adhoc client frames 8 0
Access points present in attack-list 0 0
Access points not present in ssid-list 0 0
Access points not present in vendor-list 0 0
Clients not present in vendor-list 0 0
Clients added to automatic black-list 0 0
show rfdetect data
Displays information about the APs detected by a WSS.
Syntax
show rfdetect data
Defaults
None.
Access
Enabled.
History
Usage
You can enter this command on any WSS in the Mobility Domain. The output applies only to the
switch on which you enter the command. To display all devices that a specific Nortel radio has detected, even
if the radio is managed by another WSS, use the show rfdetect visible command.
To display rogue information for the entire Mobility Domain, use the show rfdetect mobility-domain command on the
seed switch.
Only one MAC address is listed for each Nortel radio, even if the radio is beaconing multiple SSIDs.
Examples
The following command shows the devices detected by this WSS during the most recent RF
detection scan:
Version 4.0 Vendor, Type, and Flags fields added.