here is some relevant log traffic:
Aug 22 15:38:15 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:38:18 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.21, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:01:0d:40, mac =>
40:f4:07:66:ad:b0, port => 5340, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:38:18 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:38:53 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.22, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:bf:20, mac =>
40:f4:07:66:ad:b0, port => 5362, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:38:53 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:39:23 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.22, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:bf:20, mac =>
40:f4:07:66:ad:b0, port => 5363, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:39:23 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:39:25 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.23, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:b3:ca:00, mac =>
40:f4:07:66:ad:b0, port => 6671, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:39:25 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:39:28 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.21, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:01:0d:40, mac =>
40:f4:07:66:ad:b0, port => 5341, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:39:28 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:40:30 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.22, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:bf:20, mac =>
40:f4:07:66:ad:b0, port => 5364, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:40:30 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:40:31 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.23, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:b3:ca:00, mac =>
40:f4:07:66:ad:b0, port => 6672, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:40:31 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:40:32 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.21, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:01:0d:40, mac =>
40:f4:07:66:ad:b0, port => 5343, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:40:32 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:41:11 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.22, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:bf:20, mac =>
40:f4:07:66:ad:b0, port => 5365, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:41:11 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:41:13 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.23, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:b3:ca:00, mac =>
40:f4:07:66:ad:b0, port => 6673, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:41:13 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:41:14 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.20, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:1f:50, mac =>
40:f4:07:66:ad:b0, port => 3460, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:41:14 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:41:15 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.21, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:01:0d:40, mac =>
40:f4:07:66:ad:b0, port => 5344, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:41:15 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:41:52 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.22, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:bf:20, mac =>
40:f4:07:66:ad:b0, port => 5366, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:41:52 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:41:55 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.23, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:b3:ca:00, mac =>
40:f4:07:66:ad:b0, port => 6674, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:41:55 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:41:57 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.21, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:01:0d:40, mac =>
40:f4:07:66:ad:b0, port => 5346, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:41:57 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:42:01 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.20, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:1f:50, mac =>
40:f4:07:66:ad:b0, port => 3463, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:42:01 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
Aug 22 15:42:31 httpd.webservices(18290) INFO: handling radius autz
request: from switch_ip => 172.16.0.20, connection_type =>
Wireless-802.11-NoEAP,switch_mac => 88:75:56:da:1f:50, mac =>
40:f4:07:66:ad:b0, port => 3464, username => 40f40766adb0
(pf::radius::authorize)
Aug 22 15:42:31 httpd.webservices(18290) INFO: MAC: 40:f4:07:66:ad:b0 is of
status unreg; belongs into registration VLAN (pf::vlan::getRegistrationVlan)
On Fri, Aug 22, 2014 at 7:30 PM, Brian Lucas <[email protected]> wrote:
> There is an unregistered device with a Nintendo 3DS signature that is
> constantly and repeatedly getting put into our registration vlan,
> disconnecting, and repeating the process. It has generated 1.09 TB of
> traffic on the network in the last month, or about 50% of our traffic. As
> you can imagine this skews our reports a bit. Is there anyway to make it
> stop?
>
------------------------------------------------------------------------------
Slashdot TV.
Video for Nerds. Stuff that matters.
http://tv.slashdot.org/
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users
