[rancid] WLC - ignore 'rogue-ap'

[Annie Lee]

Hi Experts,

Managed to add WLC to the list (with wlogin and ciscowlc5 added)
But will get a diff email everytime with the below :

*rogue adhoc alert 01:04:00:14:43:61*

Anyway to ignore that ??

Thanks..

[heasley]

Post by Annie Lee
Hi Experts,
Managed to add WLC to the list (with wlogin and ciscowlc5 added)
*rogue adhoc alert 01:04:00:14:43:61*
Anyway to ignore that ??

shouldn't you fix that, not ignore it? isnt that a legitimate problem?

[Alex DEKKER]

Post by heasley

Post by Annie Lee
*rogue adhoc alert 01:04:00:14:43:61*
Anyway to ignore that ??

shouldn't you fix that, not ignore it? isnt that a legitimate problem?

IME these rogue alerts from WLCs are pointless - they're invariably
someone walking down the street with a hotspot enabled on their phone,
or an AP at the company next door, etc. The only time they would be of
any use is if you can guarantee none of your APs would ever be able to
hear such things outwith your premises.

Malicious rogue [something with your SSID but not part of your network]
alerts, on the other hand, are much more interesting.

alexd

[Daniel Schmidt]

Everybody's got a hotspot on their phone. Somewhere around 169-ish

if ( /^\s*rogue ap classify/ ) { $skipprocess=1; }
if ( /^\s*rogue adhoc alert/ ) { $skipprocess=1; }

Post by heasley

Post by Annie Lee
Hi Experts,
Managed to add WLC to the list (with wlogin and ciscowlc5 added)
*rogue adhoc alert 01:04:00:14:43:61*
Anyway to ignore that ??

shouldn't you fix that, not ignore it? isnt that a legitimate problem?
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo/rancid-discuss

E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.

[Annie Lee]

Hi Daniel,

It worked ! Thank you very much for your help...

Rgds...

Post by Daniel Schmidt
Everybody's got a hotspot on their phone. Somewhere around 169-ish
if ( /^\s*rogue ap classify/ ) { $skipprocess=1; }
if ( /^\s*rogue adhoc alert/ ) { $skipprocess=1; }

Post by heasley

Post by Annie Lee
Hi Experts,
Managed to add WLC to the list (with wlogin and ciscowlc5 added)
*rogue adhoc alert 01:04:00:14:43:61*
Anyway to ignore that ??

shouldn't you fix that, not ignore it? isnt that a legitimate problem?
_______________________________________________
Rancid-discuss mailing list
http://www.shrubbery.net/mailman/listinfo/rancid-discuss

E-Mail to and from me, in connection with the transaction
of public business, is subject to the Wyoming Public Records
Act and may be disclosed to third parties.