All MIBs › WLSX-TRAP-MIB › wlsxTKIPReplayAttack

wlsxTKIPReplayAttack

OID (symbolic): WLSX-TRAP-MIB::wlsxTKIPReplayAttack

OID (numeric): 1.3.6.1.4.1.14823.2.3.1.11.1.2.1178

Node type: NOTIFICATION-TYPE

Description: This trap indicates that an AP detected a TKIP replay attack. If successful this could be the precursor to more advanced attacks. For more info check: http://www.wve.org/entries/show/WVE-2008-0013

Examples

Send this trap to an SNMP manager — replace <manager> with the IP or hostname of your monitoring server (SNMPv2c):

snmptrap -v2c -c public <manager> '' WLSX-TRAP-MIB::wlsxTKIPReplayAttack
snmptrap -v2c -c public <manager> '' 1.3.6.1.4.1.14823.2.3.1.11.1.2.1178

Listen for incoming traps on the manager host (-f keeps it in the foreground, -Lo prints to stdout — useful for testing):

snmptrapd -f -Lo -c /dev/null authCommunity log public

Example snmptrapd log entry:

zoo11-linux.zoo [UDP: [192.168.30.111]:63871->[192.168.30.10]:162]:
  DISMAN-EVENT-MIB::sysUpTimeInstance = Timeticks: (246747519) 28 days, 13:24:35.19
  SNMPv2-MIB::snmpTrapOID.0 = OID: WLSX-TRAP-MIB::wlsxTKIPReplayAttack

Start monitoring Aruba wireless LAN controllers, Aruba switches (stacked) (AP-connect/client-auth/ARM/VRRP notification status) with a free 30-day trial of IPNetwork Monitor. Create custom SNMP monitor using the WLSX-TRAP-MIB::wlsxTKIPReplayAttack OID value, configure state conditions and alerts, and monitor any Aruba wireless LAN controllers, Aruba switches (stacked) (AP-connect/client-auth/ARM/VRRP notification status) from a single console.

OID Breakdown

Upper-level ancestors (10 from the standard OID tree / other modules)

Numeric OID	Name	Module
1	iso	LANART-AGENT
1.3	org	AirPair-MIB
1.3.6	dod	AirPair-MIB
1.3.6.1	internet	AirPair-MIB
1.3.6.1.4	private	AirPair-MIB
1.3.6.1.4.1	enterprises	AirPair-MIB
1.3.6.1.4.1.14823	aruba	AP80-PRIVATE-MIB
1.3.6.1.4.1.14823.2	arubaEnterpriseMibModules	AP80-PRIVATE-MIB
1.3.6.1.4.1.14823.2.3	arubaAp	AP80-PRIVATE-MIB
1.3.6.1.4.1.14823.2.3.1	wlsrEnterpriseMibModules	ARUBA-MIB

Numeric OID	Name	Module
1.3.6.1.4.1.14823.2.3.1.11	wlsrTrapMIB	WLSX-TRAP-MIB
1.3.6.1.4.1.14823.2.3.1.11.1	wlsxTrapsGroup	WLSX-TRAP-MIB
1.3.6.1.4.1.14823.2.3.1.11.1.2	wlsxTrapDefinitionsGroup	WLSX-TRAP-MIB
1.3.6.1.4.1.14823.2.3.1.11.1.2.1178	wlsxTKIPReplayAttack	WLSX-TRAP-MIB

WLSX-TRAP-MIB :: wlsxTKIPReplayAttack

wlsxTKIPReplayAttack

Module

This MIB depends on