Reset Search
 

 

Article

What does the Radar message "Cracking: Possible attack on WEP or WPA - Excessive frame receive errors" mean

« Go Back

Information

 
TitleWhat does the Radar message "Cracking: Possible attack on WEP or WPA - Excessive frame receive errors" mean
Question
What does the following message seen in Radar mean:
 
Message: Threat Inactive: (World) - Cracking: Possible attack on WEP or WPA - Excessive frame receive errors. Channel=0 MHz, Reporting AP=<APname> RAP <apserial>

 
Environment
  • IdentiFi wireless
  • Firmware all
Answer
The message is a statistics based global threat, the components of the message mean:
  • The channel is 0 because the message is statistical
  • The error message itself means the AP received a flood of more than 51 invalid frames in a 5 second interval from the same or different wireless client
Additional notes
It is possible that the message is seen as a false positive based upon a high error rate.

Possible ways to investigate the issue further are: Also note there is a more specific message that would identify a specific station which is similar to:
 
"Excessive Number of Fragments Received" cracking <mac> "Possible password cracking - Station sending excessive number of fragments"



 

Feedback

 

Was this article helpful?


   

Feedback

Please tell us how we can make this article more useful.

Characters Remaining: 255