Wireless Access Point - Taking down whole network (Like Loopback)

[burgemaster]

We have 14 Linksys Wireless-G WAP200 access points around the school.

 

We recently had our main HP switch basically grind to a halt with all activity lights more or less fully on and flashing simaltaniously!!

 

Internet was extremely slow and our broadband provider remoting into the onsite linux box could see an emmense amount of traffic flooding the network.

 

Anyway... we tracked it back to 3 wireless access points. I have now disconnected all other wireless points and am reluctant to plug any back in.

 

I cant find any information on the web simular to this but speaking to another local school they had the same problem with Netgear APs

 

Is this a common problem with APs? is there any way it can be avoided?

I cant believe that they would be able to do this much damage to a network !!!

 

Any help would be appreciated!

 

 

Also... does anyone know that software that was being used on the linux box to see all the traffic? basically it was just a command window were every ping or request showed up as a line with IP and other info.. Is this a part of linux?

[burgemaster]

I have just found Show Traffic and it seems to do exactly the same as the linux software, I can see about 15 of these line produced every second:

 

IP: X.X.7.31 SRC PORT: 2048 DESTINATION: 10.255.255.255 DEST PORT 16795 (random) PROTO: ICMP TRAFFIC: 84

 

Any ideas what the hell its doing??

[chilbs]

Sounds like something similar to wireshark (see the essential software wiki).

[burgemaster]

I think problem solved.

Looks like there is a FW bug with all our APs:

 

WAP200 Firmware Release Note. Version: 1.00.20: (ETSI - EUROPEAN)

 

Bug fixes:

Fix the issue that PING will be flooded after running multiple APs w/ multiple BSSID configured for a couple days.

[keithu]

burgemaster - the linux command was probably tcpdump.