Date: Tue, 10 Nov 2009 01:50:33 +0000 (UTC)
From: sfaibish@comcast.net
To: Masafumi OE <masa@fumi.org>
Message-ID: <1280575467.1864661257817833347.JavaMail.root@sz0036a.westchester.pa.mail.comcast.net>
In-Reply-To: <20091110011853.GC5380@anago.fumi.org>
MIME-Version: 1.0
Content-Type: multipart/alternative;
 boundary="----=_Part_92554_1799250182.1257817833346"
Cc: 76attendees@ietf.org, ietf-noc@wide.ad.jp
Subject: Re: [76attendees] Wireless 'Deauth flood' attack detected in the
 ORCHID West.
Precedence: list

------=_Part_92554_1799250182.1257817833346
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable



It isn't me. I checked.=20

Sorin=20
----- Original Message -----=20
From: "Masafumi OE" <masa@fumi.org>=20
To: 76attendees@ietf.org=20
Cc: ietf-noc@wide.ad.jp=20
Sent: Monday, November 9, 2009 8:18:53 PM GMT -05:00 US/Canada Eastern=20
Subject: [76attendees] Wireless 'Deauth flood' attack detected in the ORCHI=
D West.=20

All,=20

We are detecting 'Deauth flood' from a client is having following MAC=20
address in the ORCHID West.=20

"00:0f:e2:02:1d:3d" / h54295 @ 09/11/10 10:07:39=20

This attack is consuming our valuable 2.4GHz radio resource.=20

NOC team would like to investigate this client. =C2=A0please, people who ow=
ns=20
this client contact to the Helpdesk in the terminal room or NOC in the=20
UME(4th Floor).=20

Thank you for your assistance.=20

--=20
Masafumi OE/ NAOJ / WIDE=20

On Mon, Nov 09, 2009 at 08:02:33PM +0900,=20
=C2=A0Masafumi OE wrote:=20

> Dear IETF-folks,=20
>=20
> If you have any issue on the IETF76 WiFi, please=20
> contact to NOC staff.=20
>=20
> Your comment and suggestion are welcome.=20
>=20
>=20
> 2009/11/09=20
> #1=20
> If people continue roaming in the venue, packet loss=20
> late on the client is growing up. Client is required=20
> rebooting to solve. =C2=A0XP on Thinkpad T500 with Intel=20
> WiFi link 5300 is associating with 5GHz band (802.11an).=20
>=20
> #2=20
> Rouge RA clients=20
> see 76attendees@ietf.org ML=20
>=20
> #3=20
> Someone plug off the power of WiFi AP in the 1F lobby.=20
> DON'T PLUG OFF ANY CABLE IN THE VENUE.=20
> Thank you for your cooperation.=20
>=20
> --=20
> Masafumi OE, Astronomy Data Center, NAOJ.=20
> _______________________________________________=20
> 76attendees mailing list=20
> 76attendees@ietf.org=20
> https://www.ietf.org/mailman/listinfo/76attendees=20

--=20
Masafumi OE, Astronomy Data Center, NAOJ.=20
_______________________________________________=20
76attendees mailing list=20
76attendees@ietf.org=20
https://www.ietf.org/mailman/listinfo/76attendees=20

------=_Part_92554_1799250182.1257817833346
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: quoted-printable

<html><head><style type=3D'text/css'>p { margin: 0; }</style></head><body><=
div style=3D'font-family: Arial; font-size: 12pt; color: #000000'><P>It isn=
't me. I checked.</P>
<P>Sorin<BR>----- Original Message -----<BR>From: "Masafumi OE" &lt;masa@fu=
mi.org&gt;<BR>To: 76attendees@ietf.org<BR>Cc: ietf-noc@wide.ad.jp<BR>Sent: =
Monday, November 9, 2009 8:18:53 PM GMT -05:00 US/Canada Eastern<BR>Subject=
: [76attendees] Wireless 'Deauth flood' attack detected in the ORCHID West.=
<BR><BR>All,<BR><BR>We are detecting 'Deauth flood' from a client is having=
 following MAC <BR>address in the ORCHID West.<BR><BR>"00:0f:e2:02:1d:3d" /=
 h54295 @ 09/11/10 10:07:39<BR><BR>This attack is consuming our valuable 2.=
4GHz radio resource.<BR><BR>NOC team would like to investigate this client.=
 &nbsp;please, people who owns <BR>this client contact to the Helpdesk in t=
he terminal room or NOC in the <BR>UME(4th Floor).<BR><BR>Thank you for you=
r assistance.<BR><BR>--<BR>Masafumi OE/ NAOJ / WIDE<BR><BR>On Mon, Nov 09, =
2009 at 08:02:33PM +0900,<BR>&nbsp;Masafumi OE wrote:<BR><BR>&gt; Dear IETF=
-folks,<BR>&gt; <BR>&gt; If you have any issue on the IETF76 WiFi, please <=
BR>&gt; contact to NOC staff.<BR>&gt; <BR>&gt; Your comment and suggestion =
are welcome.<BR>&gt; <BR>&gt; <BR>&gt; 2009/11/09<BR>&gt; #1 <BR>&gt; If pe=
ople continue roaming in the venue, packet loss <BR>&gt; late on the client=
 is growing up. Client is required <BR>&gt; rebooting to solve. &nbsp;XP on=
 Thinkpad T500 with Intel <BR>&gt; WiFi link 5300 is associating with 5GHz =
band (802.11an).<BR>&gt; <BR>&gt; #2 <BR>&gt; Rouge RA clients<BR>&gt; see =
76attendees@ietf.org ML<BR>&gt; <BR>&gt; #3 <BR>&gt; Someone plug off the p=
ower of WiFi AP in the 1F lobby.<BR>&gt; DON'T PLUG OFF ANY CABLE IN THE VE=
NUE.<BR>&gt; Thank you for your cooperation.<BR>&gt; <BR>&gt; -- <BR>&gt; M=
asafumi OE, Astronomy Data Center, NAOJ.<BR>&gt; __________________________=
_____________________<BR>&gt; 76attendees mailing list<BR>&gt; 76attendees@=
ietf.org<BR>&gt; https://www.ietf.org/mailman/listinfo/76attendees<BR><BR>-=
- <BR>Masafumi OE, Astronomy Data Center, NAOJ.<BR>________________________=
_______________________<BR>76attendees mailing list<BR>76attendees@ietf.org=
<BR>https://www.ietf.org/mailman/listinfo/76attendees<BR></P></div></body><=
/html>
------=_Part_92554_1799250182.1257817833346--