Controller1.log.20.gz:Jan 5 13:49:32 Controller1 sapd[769]: <127087> |AP 009-h131-01a-w1@10.111.22.65 sapd| |ids-ap| AP(00:24:6c:ac:1e:40): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:c0 to hi:sM:AC:ad:dr:es (BSSID 00:24:6c:ac:15:21 on CHANNEL 1 with SNR 40) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:00:24:6c:ac:15:21 TID:0 Retry:0 Dir:3 StartSq:2810 FrameSq:2802 EndSq:2873 BSSID:00:24:6c:ac:15:21 . Controller1.log.20.gz:Jan 5 14:05:26 Controller1 sapd[769]: <127087> |AP 009-h131-01a-w1@10.111.22.65 sapd| |ids-ap| AP(00:24:6c:ac:1e:40): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:c0 to hi:sM:AC:ad:dr:es (BSSID 00:24:6c:ac:15:21 on CHANNEL 1 with SNR 41) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:00:24:6c:ac:15:21 TID:0 Retry:0 Dir:3 StartSq:1271 FrameSq:1270 EndSq:1334 BSSID:00:24:6c:ac:15:21 . Controller1.log.20.gz:Jan 7 12:52:57 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:0e:e1 Controller1.log.20.gz:Jan 7 13:23:43 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:21:21 Controller1.log.20.gz:Jan 7 14:35:40 Controller1 sapd[750]: <127087> |AP 009-h302-01a-w1@10.111.22.91 sapd| |ids-ap| AP(00:24:6c:ac:1f:f0): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 00:24:6c:ac:21:21 to hi:sM:AC:ad:dr:es (BSSID 00:24:6c:ac:21:21 on CHANNEL 11 with SNR 43) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:00:24:6c:ac:21:21 TID:0 Retry:0 Dir:3 StartSq:1107 FrameSq:1106 EndSq:1170 BSSID:00:24:6c:ac:21:21 . Controller1.log.3.gz:May 4 12:08:01 Controller1 sapd[1772]: <127065> |AP 009-h207-01a-w1@10.111.22.48 sapd| |ids-ap| AP(18:64:72:39:3f:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 10. Controller1.log.3.gz:May 4 12:08:01 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 38. Controller1.log.3.gz:May 4 12:08:01 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 11. Controller1.log.3.gz:May 4 12:08:24 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 4 12:23:09 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.3.gz:May 4 12:23:20 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 4 12:23:43 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 4 12:38:17 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 39. Controller1.log.3.gz:May 4 12:38:30 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 4 12:40:33 Controller1 sapd[1772]: <127065> |AP 009-h207-01a-w1@10.111.22.48 sapd| |ids-ap| AP(18:64:72:39:3f:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 0. Controller1.log.3.gz:May 4 12:53:24 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 38. Controller1.log.3.gz:May 4 12:53:43 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 4 13:08:36 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 36. Controller1.log.3.gz:May 4 13:08:53 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 4 13:23:45 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 39. Controller1.log.3.gz:May 4 13:24:13 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 4 13:30:15 Controller1 sapd[1772]: <127065> |AP 009-h207-01a-w1@10.111.22.48 sapd| |ids-ap| AP(18:64:72:39:3f:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 26. Controller1.log.3.gz:May 4 13:38:56 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.3.gz:May 4 13:39:29 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 4 13:54:05 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 39. Controller1.log.3.gz:May 4 13:54:45 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 4 14:09:17 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.3.gz:May 4 14:10:00 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 4 14:24:29 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 40. Controller1.log.3.gz:May 4 14:26:33 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 4 14:32:05 Controller1 authmgr[3790]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:21 Controller1.log.3.gz:May 6 10:09:00 Controller1 sapd[1746]: <127065> |AP 009-h310-01a-w1@10.111.22.30 sapd| |ids-ap| AP(18:64:72:14:42:20): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 33:33:00:00:00:16. SNR value is 11. Controller1.log.3.gz:May 6 10:09:00 Controller1 sapd[1746]: <127065> |AP 009-h406-01a-w1@10.111.22.24 sapd| |ids-ap| AP(18:64:72:16:46:40): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 33:33:00:00:00:16. SNR value is 7. Controller1.log.3.gz:May 6 10:09:03 Controller1 sapd[1746]: <127065> |AP 009-h233-01a-w1@10.111.22.47 sapd| |ids-ap| AP(18:64:72:16:59:60): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.3.gz:May 6 10:09:05 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:c0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 6 10:09:13 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:80): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 22. Controller1.log.3.gz:May 6 10:10:25 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 6 10:11:40 Controller1 authmgr[3790]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:31 Controller1.log.3.gz:May 6 10:17:27 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 38. Controller1.log.3.gz:May 6 10:17:27 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver 33:33:00:01:00:02. SNR value is 10. Controller1.log.3.gz:May 6 10:17:33 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.3.gz:May 6 10:17:34 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 0. Controller1.log.3.gz:May 6 10:32:42 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 37. Controller1.log.3.gz:May 6 10:33:29 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.3.gz:May 6 10:33:29 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.3.gz:May 6 10:34:24 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 0. Controller1.log.3.gz:May 6 10:47:58 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.3.gz:May 6 10:50:20 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 6 10:50:20 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.3.gz:May 6 10:50:23 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 6 11:03:11 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 36. Controller1.log.3.gz:May 6 11:05:36 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 6 11:05:36 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 6 11:07:17 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 6 11:18:23 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 36. Controller1.log.3.gz:May 6 11:21:02 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.3.gz:May 6 11:21:02 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.3.gz:May 6 11:21:04 Controller1 sapd[1746]: <127065> |AP 009-h233-01a-w1@10.111.22.47 sapd| |ids-ap| AP(18:64:72:16:59:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 15. Controller1.log.3.gz:May 6 11:22:59 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 6 11:33:34 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 30. Controller1.log.3.gz:May 6 11:36:13 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 16. Controller1.log.3.gz:May 6 11:36:15 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 6 11:42:09 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 6 11:48:49 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.3.gz:May 6 11:52:19 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 16. Controller1.log.3.gz:May 6 11:54:46 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 15. Controller1.log.3.gz:May 6 11:57:58 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 6 12:04:06 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.3.gz:May 6 12:08:10 Controller1 sapd[1746]: <127065> |AP 009-h104-01a-w1@10.111.22.35 sapd| |ids-ap| AP(18:64:72:16:5d:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 6 12:11:11 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 0. Controller1.log.3.gz:May 6 12:14:34 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 0. Controller1.log.3.gz:May 6 12:19:20 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver 01:00:5e:00:00:fb. SNR value is 0. Controller1.log.3.gz:May 6 12:21:20 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:20): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 42. Controller1.log.3.gz:May 6 12:21:23 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:80): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 25. Controller1.log.3.gz:May 6 12:22:40 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:c0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 6 12:23:13 Controller1 sapd[1746]: <127065> |AP 009-h233-01a-w1@10.111.22.47 sapd| |ids-ap| AP(18:64:72:16:59:60): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.3.gz:May 6 12:36:30 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:20): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.3.gz:May 6 12:36:37 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:80): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 21. Controller1.log.3.gz:May 6 12:38:59 Controller1 sapd[1746]: <127065> |AP 009-h233-01a-w1@10.111.22.47 sapd| |ids-ap| AP(18:64:72:16:59:60): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 0. Controller1.log.3.gz:May 6 12:39:15 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:c0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 7. Controller1.log.3.gz:May 6 12:51:40 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:20): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 39. Controller1.log.3.gz:May 6 12:51:48 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:80): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 26. Controller1.log.3.gz:May 6 12:55:08 Controller1 sapd[1746]: <127065> |AP 009-h233-01a-w1@10.111.22.47 sapd| |ids-ap| AP(18:64:72:16:59:60): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 6 12:57:17 Controller1 sapd[1746]: <127065> |AP 009-h301-01a-w1@10.111.22.31 sapd| |ids-ap| AP(18:64:72:14:40:c0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 9. Controller1.log.3.gz:May 6 13:06:53 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:20): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 26. Controller1.log.3.gz:May 6 13:07:05 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:80): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 18. Controller1.log.3.gz:May 6 13:10:28 Controller1 sapd[1746]: <127065> |AP 009-h233-01a-w1@10.111.22.47 sapd| |ids-ap| AP(18:64:72:16:59:60): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 16. Controller1.log.3.gz:May 6 13:22:05 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:20): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 44. Controller1.log.3.gz:May 6 13:22:17 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:80): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 01:00:5e:7f:ff:fa. SNR value is 41. Controller1.log.3.gz:May 6 13:27:48 Controller1 sapd[1746]: <127065> |AP 009-h233-01a-w1@10.111.22.47 sapd| |ids-ap| AP(18:64:72:16:59:60): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.3.gz:May 6 13:37:19 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:20): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 43. Controller1.log.3.gz:May 6 13:37:47 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:80): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:20), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 22. Controller1.log.3.gz:May 6 13:38:18 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 39. Controller1.log.3.gz:May 6 13:39:32 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 7. Controller1.log.3.gz:May 6 13:53:29 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 37. Controller1.log.3.gz:May 6 14:08:43 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 37. Controller1.log.3.gz:May 6 14:23:51 Controller1 sapd[1746]: <127065> |AP 009-h208-01a-w1@10.111.22.28 sapd| |ids-ap| AP(18:64:72:39:3b:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.3.gz:May 6 14:23:56 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 37. Controller1.log.3.gz:May 6 14:39:08 Controller1 sapd[1772]: <127065> |AP 009-h101-02a-w1@10.111.22.125 sapd| |ids-ap| AP(18:64:72:16:5b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:5b:30), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 37. Controller1.log.3.gz:May 7 07:58:28 Controller1 authmgr[3790]: <522027> MAC=hi:sM:AC:ad:dr:es IP=10.110.5.150 IP Spoof from MAC=c4:43:8f:cd:3c:4a role=cpp-role-guest/(null) Controller1.log.4.gz:Apr 28 11:03:18 Controller1 authmgr[3588]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:1b:81 Controller1.log.4.gz:Apr 28 11:03:42 Controller1 authmgr[3588]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:1f:f1 Controller1.log.4.gz:Apr 28 12:40:14 Controller1 authmgr[3588]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:0e:a1 Controller1.log.4.gz:Apr 28 13:02:40 Controller1 authmgr[3588]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:1b:89 Controller1.log.4.gz:Apr 29 10:28:02 Controller1 authmgr[3588]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:21 Controller1.log.4.gz:Apr 29 10:28:15 Controller1 authmgr[3588]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:21 Controller1.log.4.gz:Apr 30 12:57:35 Controller1 authmgr[3588]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:21 Controller1.log.4.gz:May 1 11:22:51 Controller1 authmgr[3790]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:21 Controller1.log.4.gz:May 1 12:20:36 Controller1 authmgr[3790]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:21 Controller1.log.4.gz:May 1 12:21:07 Controller1 authmgr[3790]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 18:64:72:16:5b:21 Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-2611-ap03@10.111.15.81 sapd| |ids-ap| AP(18:64:72:16:3c:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 10. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-1116-ap01@10.111.15.82 sapd| |ids-ap| AP(18:64:72:16:a4:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 33. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-1116d-ap01@10.111.15.77 sapd| |ids-ap| AP(18:64:72:16:60:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 26. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-1116b-ap03@10.111.15.76 sapd| |ids-ap| AP(18:64:72:16:54:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 44. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-2611-ap01@10.111.15.72 sapd| |ids-ap| AP(18:64:72:16:a5:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 18. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[750]: <127065> |AP 066-bstore-ap02-w1@10.111.17.198 sapd| |ids-ap| AP(00:24:6c:a9:35:28): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 7. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-2611c-ap01-w1@10.111.14.59 sapd| |ids-ap| AP(18:64:72:f3:7b:10): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 6. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-2611a-ap02-w1@10.111.15.39 sapd| |ids-ap| AP(18:64:72:f3:75:f0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 7. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1708]: <127065> |AP 035-2611c-ap02-w1@10.111.14.54 sapd| |ids-ap| AP(18:64:72:f3:78:50): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 5. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-2611b-ap02-w1@10.111.15.40 sapd| |ids-ap| AP(18:64:72:f3:74:50): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 6. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-food-ap01@10.111.14.98 sapd| |ids-ap| AP(18:64:72:14:44:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 21. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1731]: <127065> |AP 035-food-ap05@10.111.15.84 sapd| |ids-ap| AP(18:64:72:14:47:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 14. Controller1.log.5.gz:Apr 20 20:29:15 Controller1 sapd[1708]: <127065> |AP 035-1399-ap02@10.111.14.79 sapd| |ids-ap| AP(18:64:72:16:5f:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 6. Controller1.log.5.gz:Apr 20 20:29:36 Controller1 sapd[1731]: <127065> |AP 035-2611-ap02@10.111.14.86 sapd| |ids-ap| AP(18:64:72:16:55:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 29. Controller1.log.5.gz:Apr 20 20:29:42 Controller1 sapd[766]: <127065> |AP 066-nwsales-w1@10.111.16.208 sapd| |ids-ap| AP(00:1a:1e:8c:3b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 20. Controller1.log.5.gz:Apr 20 20:29:50 Controller1 sapd[1731]: <127065> |AP 035-1116m-ap01@10.111.14.89 sapd| |ids-ap| AP(18:64:72:16:60:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 12. Controller1.log.5.gz:Apr 20 20:30:09 Controller1 sapd[1731]: <127065> |AP 035-food-ap02@10.111.14.99 sapd| |ids-ap| AP(18:64:72:14:47:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.5.gz:Apr 20 20:30:22 Controller1 sapd[1708]: <127065> |AP 035-1116b-ap02@10.111.15.80 sapd| |ids-ap| AP(18:64:72:16:a8:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 34. Controller1.log.5.gz:Apr 20 20:31:21 Controller1 sapd[1731]: <127065> |AP 035-1116b-ap01@10.111.15.78 sapd| |ids-ap| AP(18:64:72:16:5e:50): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 44. Controller1.log.5.gz:Apr 20 20:35:14 Controller1 sapd[1731]: <127065> |AP 035-1399-ap03@10.111.15.55 sapd| |ids-ap| AP(18:64:72:16:52:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 6. Controller1.log.5.gz:Apr 20 20:36:10 Controller1 sapd[1708]: <127087> |AP 035-1399-ap02@10.111.14.79 sapd| |ids-ap| AP(18:64:72:16:5f:d0): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:f9 to hi:sM:AC:ad:dr:es (BSSID 18:64:72:16:54:70 on CHANNEL 36 with SNR 8) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:18:64:72:16:54:70 TID:0 Retry:0 Dir:3 StartSq:3225 FrameSq:3224 EndSq:3288 BSSID:18:64:72:16:54:70 . Controller1.log.5.gz:Apr 20 20:36:10 Controller1 sapd[1731]: <127087> |AP 035-food-ap05@10.111.15.84 sapd| |ids-ap| AP(18:64:72:14:47:d0): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:f9 to hi:sM:AC:ad:dr:es (BSSID 18:64:72:16:54:70 on CHANNEL 36 with SNR 14) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:18:64:72:16:54:70 TID:0 Retry:0 Dir:3 StartSq:3225 FrameSq:3224 EndSq:3288 BSSID:18:64:72:16:54:70 . Controller1.log.5.gz:Apr 20 20:42:55 Controller1 sapd[1731]: <127042> |AP 035-1116d-ap01@10.111.15.77 sapd| |ids-ap| AP(18:64:72:16:60:70): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:42:55 Controller1 sapd[1731]: <127042> |AP 035-1116-ap01@10.111.15.82 sapd| |ids-ap| AP(18:64:72:16:a4:90): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:42:55 Controller1 sapd[1731]: <127042> |AP 035-1116b-ap03@10.111.15.76 sapd| |ids-ap| AP(18:64:72:16:54:70): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:44:20 Controller1 sapd[1731]: <127065> |AP 035-1116d-ap01@10.111.15.77 sapd| |ids-ap| AP(18:64:72:16:60:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.5.gz:Apr 20 20:44:21 Controller1 sapd[1731]: <127065> |AP 035-2611-ap03@10.111.15.81 sapd| |ids-ap| AP(18:64:72:16:3c:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 14. Controller1.log.5.gz:Apr 20 20:44:21 Controller1 sapd[1731]: <127065> |AP 035-1116-ap01@10.111.15.82 sapd| |ids-ap| AP(18:64:72:16:a4:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 30. Controller1.log.5.gz:Apr 20 20:44:23 Controller1 sapd[1731]: <127065> |AP 035-2611-ap01@10.111.15.72 sapd| |ids-ap| AP(18:64:72:16:a5:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 28. Controller1.log.5.gz:Apr 20 20:44:24 Controller1 sapd[1731]: <127065> |AP 035-food-ap01@10.111.14.98 sapd| |ids-ap| AP(18:64:72:14:44:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 19. Controller1.log.5.gz:Apr 20 20:44:24 Controller1 sapd[1731]: <127065> |AP 035-food-ap05@10.111.15.84 sapd| |ids-ap| AP(18:64:72:14:47:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 13. Controller1.log.5.gz:Apr 20 20:44:24 Controller1 sapd[1731]: <127065> |AP 035-1116b-ap03@10.111.15.76 sapd| |ids-ap| AP(18:64:72:16:54:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 44. Controller1.log.5.gz:Apr 20 20:45:20 Controller1 sapd[1731]: <127065> |AP 035-food-ap02@10.111.14.99 sapd| |ids-ap| AP(18:64:72:14:47:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 18. Controller1.log.5.gz:Apr 20 20:45:32 Controller1 sapd[766]: <127065> |AP 066-nwsales-w1@10.111.16.208 sapd| |ids-ap| AP(00:1a:1e:8c:3b:30): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 11. Controller1.log.5.gz:Apr 20 20:45:42 Controller1 sapd[1708]: <127065> |AP 035-1399-ap02@10.111.14.79 sapd| |ids-ap| AP(18:64:72:16:5f:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 7. Controller1.log.5.gz:Apr 20 20:46:17 Controller1 sapd[1731]: <127065> |AP 035-2611-ap02@10.111.14.86 sapd| |ids-ap| AP(18:64:72:16:55:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 28. Controller1.log.5.gz:Apr 20 20:46:55 Controller1 sapd[1731]: <127065> |AP 035-1116m-ap01@10.111.14.89 sapd| |ids-ap| AP(18:64:72:16:60:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 28. Controller1.log.5.gz:Apr 20 20:47:21 Controller1 sapd[1708]: <127065> |AP 035-1116b-ap02@10.111.15.80 sapd| |ids-ap| AP(18:64:72:16:a8:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 34. Controller1.log.5.gz:Apr 20 20:47:21 Controller1 sapd[1708]: <127042> |AP 035-1116b-ap02@10.111.15.80 sapd| |ids-ap| AP(18:64:72:16:a8:70): Windows Bridge: An AP detected a bridge on CHANNEL 40 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:47:31 Controller1 sapd[1731]: <127065> |AP 035-1116b-ap01@10.111.15.78 sapd| |ids-ap| AP(18:64:72:16:5e:50): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 43. Controller1.log.5.gz:Apr 20 20:47:31 Controller1 sapd[1731]: <127042> |AP 035-1116b-ap01@10.111.15.78 sapd| |ids-ap| AP(18:64:72:16:5e:50): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:48:22 Controller1 sapd[1731]: <127065> |AP 035-2399-ap01@10.111.15.74 sapd| |ids-ap| AP(18:64:72:16:33:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 12. Controller1.log.5.gz:Apr 20 20:58:39 Controller1 sapd[1731]: <127042> |AP 035-2611-ap01@10.111.15.72 sapd| |ids-ap| AP(18:64:72:16:a5:d0): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:71 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:58:39 Controller1 sapd[1731]: <127042> |AP 035-1116d-ap01@10.111.15.77 sapd| |ids-ap| AP(18:64:72:16:60:70): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:71 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:58:39 Controller1 sapd[1731]: <127042> |AP 035-1116-ap01@10.111.15.82 sapd| |ids-ap| AP(18:64:72:16:a4:90): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:71 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 20:58:39 Controller1 sapd[1731]: <127042> |AP 035-1116b-ap03@10.111.15.76 sapd| |ids-ap| AP(18:64:72:16:54:70): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:71 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-1116-ap01@10.111.15.82 sapd| |ids-ap| AP(18:64:72:16:a4:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 46. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-2611-ap01@10.111.15.72 sapd| |ids-ap| AP(18:64:72:16:a5:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 26. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-1116d-ap01@10.111.15.77 sapd| |ids-ap| AP(18:64:72:16:60:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 33. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-2611b-ap01-w1@10.111.14.55 sapd| |ids-ap| AP(18:64:72:f3:73:10): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 8. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-1399-ap03@10.111.15.55 sapd| |ids-ap| AP(18:64:72:16:52:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 6. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-2611-ap03@10.111.15.81 sapd| |ids-ap| AP(18:64:72:16:3c:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 15. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-food-ap01@10.111.14.98 sapd| |ids-ap| AP(18:64:72:14:44:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 22. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-2611a-ap02-w1@10.111.15.39 sapd| |ids-ap| AP(18:64:72:f3:75:f0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 7. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-food-ap02@10.111.14.99 sapd| |ids-ap| AP(18:64:72:14:47:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 16. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-food-ap05@10.111.15.84 sapd| |ids-ap| AP(18:64:72:14:47:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 15. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-2611b-ap02-w1@10.111.15.40 sapd| |ids-ap| AP(18:64:72:f3:74:50): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 6. Controller1.log.5.gz:Apr 20 21:00:00 Controller1 sapd[1731]: <127065> |AP 035-1116b-ap03@10.111.15.76 sapd| |ids-ap| AP(18:64:72:16:54:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 35. Controller1.log.5.gz:Apr 20 21:00:01 Controller1 sapd[1731]: <127042> |AP 035-2611-ap03@10.111.15.81 sapd| |ids-ap| AP(18:64:72:16:3c:d0): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 21:00:01 Controller1 sapd[1731]: <127042> |AP 035-food-ap02@10.111.14.99 sapd| |ids-ap| AP(18:64:72:14:47:70): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 21:00:01 Controller1 sapd[1731]: <127042> |AP 035-food-ap01@10.111.14.98 sapd| |ids-ap| AP(18:64:72:14:44:90): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 21:00:01 Controller1 sapd[1731]: <127042> |AP 035-2611-ap01@10.111.15.72 sapd| |ids-ap| AP(18:64:72:16:a5:d0): Windows Bridge: An AP detected a bridge on CHANNEL 36 between access point (BSSID 18:64:72:16:54:70 and SSID ) and a node hi:sM:AC:ad:dr:es. Controller1.log.5.gz:Apr 20 21:05:17 Controller1 sapd[1731]: <127065> |AP 035-1116b-ap01@10.111.15.78 sapd| |ids-ap| AP(18:64:72:16:5e:50): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 42. Controller1.log.5.gz:Apr 20 21:10:45 Controller1 sapd[1731]: <127065> |AP 035-1116m-ap01@10.111.14.89 sapd| |ids-ap| AP(18:64:72:16:60:b0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 10. Controller1.log.5.gz:Apr 20 21:13:28 Controller1 sapd[1708]: <127065> |AP 035-1116b-ap02@10.111.15.80 sapd| |ids-ap| AP(18:64:72:16:a8:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver ff:ff:ff:ff:ff:ff. SNR value is 31. Controller1.log.5.gz:Apr 20 21:15:06 Controller1 sapd[1731]: <127065> |AP 035-1116-ap01@10.111.15.82 sapd| |ids-ap| AP(18:64:72:16:a4:90): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 30. Controller1.log.5.gz:Apr 20 21:15:07 Controller1 sapd[1731]: <127065> |AP 035-1116d-ap01@10.111.15.77 sapd| |ids-ap| AP(18:64:72:16:60:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver 01:80:c2:00:00:00. SNR value is 22. Controller1.log.5.gz:Apr 20 21:15:08 Controller1 sapd[1731]: <127065> |AP 035-2611-ap01@10.111.15.72 sapd| |ids-ap| AP(18:64:72:16:a5:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 26. Controller1.log.5.gz:Apr 20 21:15:08 Controller1 sapd[1731]: <127065> |AP 035-2611-ap03@10.111.15.81 sapd| |ids-ap| AP(18:64:72:16:3c:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 15. Controller1.log.5.gz:Apr 20 21:15:08 Controller1 sapd[1731]: <127065> |AP 035-food-ap05@10.111.15.84 sapd| |ids-ap| AP(18:64:72:14:47:d0): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 14. Controller1.log.5.gz:Apr 20 21:15:09 Controller1 sapd[1731]: <127065> |AP 035-1116b-ap03@10.111.15.76 sapd| |ids-ap| AP(18:64:72:16:54:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source hi:sM:AC:ad:dr:es and receiver 6c:fa:89:69:cb:f9. SNR value is 40. Controller1.log.5.gz:Apr 20 21:15:38 Controller1 sapd[1731]: <127065> |AP 035-food-ap02@10.111.14.99 sapd| |ids-ap| AP(18:64:72:14:47:70): Valid Client Not Using Encryption: An AP detected an unencrypted frame between a valid client (hi:sM:AC:ad:dr:es) and access point (BSSID 18:64:72:16:54:70), with source 6c:fa:89:69:cb:f9 and receiver hi:sM:AC:ad:dr:es. SNR value is 17. Controller1.log.5.gz:Apr 21 11:13:21 Controller1 sapd[752]: <127087> |AP 017-h2120-01a-w1@10.111.22.105 sapd| |ids-ap| AP(00:24:6c:ac:15:50): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:fe to hi:sM:AC:ad:dr:es (BSSID 18:64:72:f3:71:61 on CHANNEL 6 with SNR 23) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:18:64:72:f3:71:61 TID:0 Retry:0 Dir:3 StartSq:773 FrameSq:762 EndSq:836 BSSID:18:64:72:f3:71:61 . Controller1.log.5.gz:Apr 21 11:21:04 Controller1 sapd[1731]: <127109> |AP 017-h1212-01a-w1@10.111.22.41 sapd| |ids-ap| AP(18:64:72:f3:71:60): Power Save DoS Attack: An AP detected a Power Save DoS attack on client hi:sM:AC:ad:dr:es and access point (BSSID 18:64:72:f3:71:61 and SSID CPP on CHANNEL 6). SNR of client is 18. Additional Info: Pwr-Mgmt-On-Pkts:439; Pwr-Mgmt-Off-Pkts:174. Controller1.log.5.gz:Apr 23 08:10:16 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:a8:17:79 Controller1.log.5.gz:Apr 23 08:12:15 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:a8:17:79 Controller1.log.5.gz:Apr 23 14:39:55 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:39:55 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:40:16 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:40:16 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:40:38 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:40:38 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:40:58 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:40:58 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:41:19 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:21:21, deauthenticating the station Controller1.log.5.gz:Apr 23 14:41:19 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:21:21 doing 802.1x Controller1.log.5.gz:Apr 23 14:41:40 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:91, deauthenticating the station Controller1.log.5.gz:Apr 23 14:41:40 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:91 doing 802.1x Controller1.log.5.gz:Apr 23 14:42:03 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:91 doing 802.1x Controller1.log.5.gz:Apr 23 14:42:28 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:42:28 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:42:48 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:42:48 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:43:09 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:43:09 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:43:29 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:43:29 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:43:50 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.5.gz:Apr 23 14:44:12 Controller1 authmgr[3588]: <132197> Maximum number of retries was attempted for station ktstovner hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99, deauthenticating the station Controller1.log.5.gz:Apr 23 14:44:12 Controller1 authmgr[3588]: <132053> Dropping the radius packet for Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:99 doing 802.1x Controller1.log.6.gz:Apr 14 08:20:21 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:13:91 Controller1.log.6.gz:Apr 14 11:17:14 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:91 Controller1.log.6.gz:Apr 14 12:04:08 Controller1 sapd[733]: <127087> |AP 009-h207-01a-w1@10.111.22.96 sapd| |ids-ap| AP(00:24:6c:ac:21:20): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:fe to hi:sM:AC:ad:dr:es (BSSID 00:24:6c:ac:35:91 on CHANNEL 11 with SNR 17) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:00:24:6c:ac:35:91 TID:0 Retry:0 Dir:3 StartSq:862 FrameSq:858 EndSq:925 BSSID:00:24:6c:ac:35:91 . Controller1.log.6.gz:Apr 15 10:02:17 Controller1 sapd[750]: <127087> |AP 009-h315-01a-w1@10.111.22.81 sapd| |ids-ap| AP(00:24:6c:ac:1b:00): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:fe to hi:sM:AC:ad:dr:es (BSSID 00:24:6c:ac:0e:a1 on CHANNEL 6 with SNR 28) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:00:24:6c:ac:0e:a1 TID:0 Retry:0 Dir:3 StartSq:2224 FrameSq:2223 EndSq:2287 BSSID:00:24:6c:ac:0e:a1 . Controller1.log.6.gz:Apr 16 08:40:38 Controller1 sapd[753]: <127087> |AP 015-1808-ap1-w1@10.111.19.189 sapd| |ids-ap| AP(00:24:6c:a8:13:f0): Block ACK DoS Attack: An AP detected a data frame which indicates a possible Block ACK DoS Attack. The frame from 6c:fa:89:69:cb:fe to hi:sM:AC:ad:dr:es (BSSID 00:24:6c:a8:12:71 on CHANNEL 1 with SNR 36) is outside the current sequence number window, and thus may be dropped. Additional Info: Victim:00:24:6c:a8:12:71 TID:0 Retry:0 Dir:3 StartSq:1244 FrameSq:1243 EndSq:1307 BSSID:00:24:6c:a8:12:71 . Controller1.log.6.gz:Apr 16 09:13:16 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:a8:17:79 Controller1.log.8.gz:Mar 30 11:39:06 Controller1 authmgr[3525]: <132030> Dropping EAPOL packet sent by Station hi:sM:AC:ad:dr:es 00:24:6c:ac:35:91