Cisco 2100 Series Configuration Manual page 306

Configuring IDS
To see the number of attacks detected by the enabled signatures, enter this command:
3.
show wps signature events summary
Information similar to the following appears:
Precedence Signature Name
---------- ------------------ -----
1
2
4. To see more information on the attacks detected by a particular standard or custom signature, enter
this command:
show wps signature events {standard | custom} precedence# summary
Information similar to the following appears:
Precedence....................................... 1
Signature Name................................... Bcast deauth
Type............................................. Standard
Number of active events....................... 2
Source MAC Addr
----------------- ------------
00:01:02:03:04:01 Per Signature
00:01:02:03:04:01 Per Mac
5. To see information on attacks that are tracked by access points on a per-signature and per-channel
basis, enter this command:
show wps signature events {standard | custom} precedence# detailed per-signature source_mac
To see information on attacks that are tracked by access points on an individual-client basis (by
6.
MAC address), enter this command:
show wps signature events {standard | custom} precedence# detailed per-mac source_mac
Information similar to the following appears:
Source MAC....................................... 00:01:02:03:04:01
Precedence....................................... 1
Signature Name................................... Bcast deauth
Type............................................. Standard
Track............................................ Per Mac
Frequency........................................ 6
Reported By
Cisco Wireless LAN Controller Configuration Guide
5-118
Bcast deauth
NULL probe resp 1
Track Method
AP 1
MAC Address.............................. 00:0b:85:01:4d:80
Name..................................... Test_AP_1
Radio Type............................... 802.11bg
Channel.................................. 4
Last reported by this AP................. Tue Dec 6 00:17:49 2005
AP 2
MAC Address.............................. 00:0b:85:26:91:52
Name..................................... Test_AP_2
Radio Type............................... 802.11bg
Channel.................................. 6
Last reported by this AP................. Tue Dec 6 00:30:04 2005
Type # Events
-----------
Standard 2
Standard 1
Frequency No. APs Last Heard
--------- -------- ------------------------
4 3 Tue Dec 6 00:17:44 2005
6 2 Tue Dec 6 00:30:04 2005
Chapter 5 Configuring Security Solutions
OL-17037-01