Message ID: 43533
Message Description: LOG_ID_EVENT_WIRELESS_WIDS_MAC_OUI
Message Meaning: Wireless invalid MAC OUI detected
Type: Event
Category: WIRELESS
Severity: Notice
|
Log Field Name |
Description |
Data Type |
Length |
|---|---|---|---|
|
date |
Date |
string |
10 |
|
time |
Time |
string |
8 |
|
logid |
Log ID |
string |
10 |
|
type |
Log Type |
string |
16 |
|
subtype |
Log Subtype |
string |
20 |
|
level |
Log Level |
string |
11 |
|
devid |
Device ID |
string |
16 |
|
vd |
Virtual Domain Name |
string |
32 |
|
eventtime |
|
uint64 |
20 |
|
tz |
|
string |
5 |
|
logdesc |
Log Description |
string |
4096 |
|
action |
Action |
string |
65 |
|
msg |
Log Message |
string |
4096 |
|
bssid |
Service Set ID |
string |
17 |
|
channel |
Channel |
uint8 |
3 |
|
manuf |
Manufacturer name |
string |
20 |
|
live |
time in seconds |
uint32 |
10 |
|
age |
time in seconds - time passed since last seen |
uint32 |
10 |
|
sndetected |
SN of the AP which detected the rogue AP |
string |
36 |
|
radioiddetected |
Radio ID on the AP which detected the rogue AP |
uint8 |
3 |
|
threattype |
WIDS threat type |
string |
64 |
|
rssi |
Received signal strength indicator |
uint8 |
3 |
|
frametype |
Frame Type |
string |
32 |
|
ds |
direction with distribution system |
string |
8 |
|
seq |
Sequence |
string |
16 |
|
encrypt |
whether the packet is encrypted or not |
uint8 |
3 |
|
tamac |
the MAC address of Transmitter, if none, then Receiver |
string |
17 |
|
invalidmac |
the MAC address with invalid OUI |
string |
17 |